index=* | stats count by index

|metadata type=sources index=*

|metasearch index=app_idm sourcetype=* | stats count by index, sourcetype | fields - count

index=app_idm | stats values(source) as sources ,values(sourcetype) as sourcetype by host