https://community.splunk.com/t5/Getting-Data-In/Get-todays-Indexing-Volume-using-the-cli/m-p/70496#M14342 <P>I guess you can use the <CODE>rest</CODE> search for that from the CLI.</P> <P>Try:</P> <PRE><CODE>./splunk search "| rest /services/licenser/pools | fields + title used_bytes" </CODE></PRE> <P>And work from there - also check out the docs for the REST API;<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTcontents">http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTcontents</A></P> <P>Hope this helps,</P> <P>Kristian</P> Fri, 21 Dec 2012 13:56:02 GMT kristian_kolb 2012-12-21T13:56:02Z https://community.splunk.com/t5/Getting-Data-In/Get-todays-Indexing-Volume-using-the-cli/m-p/70495#M14341 <P>Is there a way to retrieve the indexing volume of the current day using the CLI?</P> Fri, 21 Dec 2012 10:27:35 GMT https://community.splunk.com/t5/Getting-Data-In/Get-todays-Indexing-Volume-using-the-cli/m-p/70495#M14341 FRoth 2012-12-21T10:27:35Z https://community.splunk.com/t5/Getting-Data-In/Get-todays-Indexing-Volume-using-the-cli/m-p/70496#M14342 <P>I guess you can use the <CODE>rest</CODE> search for that from the CLI.</P> <P>Try:</P> <PRE><CODE>./splunk search "| rest /services/licenser/pools | fields + title used_bytes" </CODE></PRE> <P>And work from there - also check out the docs for the REST API;<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTcontents">http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTcontents</A></P> <P>Hope this helps,</P> <P>Kristian</P> Fri, 21 Dec 2012 13:56:02 GMT https://community.splunk.com/t5/Getting-Data-In/Get-todays-Indexing-Volume-using-the-cli/m-p/70496#M14342 kristian_kolb 2012-12-21T13:56:02Z https://community.splunk.com/t5/Getting-Data-In/Get-todays-Indexing-Volume-using-the-cli/m-p/70497#M14343 <P>It says:<BR /> FATAL: Error in 'rest' command: This command must be the first command of a search.</P> Fri, 21 Dec 2012 14:04:35 GMT https://community.splunk.com/t5/Getting-Data-In/Get-todays-Indexing-Volume-using-the-cli/m-p/70497#M14343 FRoth 2012-12-21T14:04:35Z https://community.splunk.com/t5/Getting-Data-In/Get-todays-Indexing-Volume-using-the-cli/m-p/70498#M14344 <P>Don't include the space, so "| rest</P> Fri, 21 Dec 2012 14:09:20 GMT https://community.splunk.com/t5/Getting-Data-In/Get-todays-Indexing-Volume-using-the-cli/m-p/70498#M14344 Drainy 2012-12-21T14:09:20Z https://community.splunk.com/t5/Getting-Data-In/Get-todays-Indexing-Volume-using-the-cli/m-p/70499#M14345 <P>oops, my bad. Thanks Drainy.</P> Fri, 21 Dec 2012 14:16:41 GMT https://community.splunk.com/t5/Getting-Data-In/Get-todays-Indexing-Volume-using-the-cli/m-p/70499#M14345 kristian_kolb 2012-12-21T14:16:41Z