topic Splunk Query in Splunk Cloud Platform

Splunk Query

Sushant — Mon, 01 Mar 2021 08:13:47 GMT

Hi, team

I want to fetch output like shown below. I want to fetch amount of data consumed by particular index (for eg. index="abc") on different dates. Could anyone help me out for this issue

Index	Date	GB
abc	27-02-2021	10.09
	28-02-2021	11.54
	01-03-2021	09.00

Thanks

Re: Splunk Query

ITWhisperer — Mon, 01 Mar 2021 09:18:52 GMT

What data do you have available to work with?

Re: Splunk Query

Sushant — Mon, 01 Mar 2021 13:25:50 GMT

I have machine logs which is pushed by splunk forwarder but have limited amount of data to store. For this, I would to like to know on which date how much data consumed by particular index