https://community.splunk.com/t5/Getting-Data-In/Data-Indexed-in-a-specifc-interval/m-p/43341#M8083 <P>You would have to do:</P> <PRE><CODE>earliest=1/2/2011:12:34:56 latest=2/2/2011:1:23:45 index=_internal source=*metrics.log group=per_index_thruput | timechart sum(kb) by series </CODE></PRE> Sun, 13 Feb 2011 15:38:52 GMT gkanapathy 2011-02-13T15:38:52Z https://community.splunk.com/t5/Getting-Data-In/Data-Indexed-in-a-specifc-interval/m-p/43340#M8082 <P>What will be the query to find out the bytes indexed by a server during a specific interval - absolute time period?</P> <P>Thanks.</P> Sun, 13 Feb 2011 07:29:01 GMT https://community.splunk.com/t5/Getting-Data-In/Data-Indexed-in-a-specifc-interval/m-p/43340#M8082 leapop 2011-02-13T07:29:01Z https://community.splunk.com/t5/Getting-Data-In/Data-Indexed-in-a-specifc-interval/m-p/43341#M8083 <P>You would have to do:</P> <PRE><CODE>earliest=1/2/2011:12:34:56 latest=2/2/2011:1:23:45 index=_internal source=*metrics.log group=per_index_thruput | timechart sum(kb) by series </CODE></PRE> Sun, 13 Feb 2011 15:38:52 GMT https://community.splunk.com/t5/Getting-Data-In/Data-Indexed-in-a-specifc-interval/m-p/43341#M8083 gkanapathy 2011-02-13T15:38:52Z