https://community.splunk.com/t5/Monitoring-Splunk/How-to-calculate-size-of-index-via-REST-API/m-p/623985#M9240 <P>I need to calculate the size of a clustered index, and I used this API for it:<BR /><SPAN>/services/cluster/manager/indexes (<A class="" title="https://docs.splunk.com/Documentation/Splunk/9.0.2/RESTREF/RESTcluster#:~:text=content%3E%0A%20%20%3C/entry%3E%0A%3C/feed%3E-,cluster/manager/indexes,-https%3A//%3Chost%3E%3A%3CmPort" href="https://docs.splunk.com/Documentation/Splunk/9.0.2/RESTREF/RESTcluster#:~:text=content%3E%0A%20%20%3C/entry%3E%0A%3C/feed%3E-,cluster/manager/indexes,-https%3A//%3Chost%3E%3A%3CmPort" target="_blank" rel="noopener noreferrer">https://docs.splunk.com/Documentation/Splunk/9.0.2/RESTREF/RESTcluster#:~:text=content%3E%0A%20%20%3C/entry%3E%0A%3C/feed%3E-,cluster/manager/indexes,-https%3A//%3Chost%3E%3A%3CmPort</A>)</SPAN></P> <P><SPAN>But the&nbsp;index_size returned in the response is different (much less) from the total I get, if I use the dbinspect command on a particular index, and add size for the db_&lt;buckets&gt;. i.e. originating buckets.</SPAN></P> <P><SPAN>Is the&nbsp;index_size supposed to denote something else? If so, it is not clearly mentioned in the API documentation.</SPAN></P> Mon, 12 Dec 2022 15:47:24 GMT Commvault 2022-12-12T15:47:24Z https://community.splunk.com/t5/Monitoring-Splunk/How-to-calculate-size-of-index-via-REST-API/m-p/623985#M9240 <P>I need to calculate the size of a clustered index, and I used this API for it:<BR /><SPAN>/services/cluster/manager/indexes (<A class="" title="https://docs.splunk.com/Documentation/Splunk/9.0.2/RESTREF/RESTcluster#:~:text=content%3E%0A%20%20%3C/entry%3E%0A%3C/feed%3E-,cluster/manager/indexes,-https%3A//%3Chost%3E%3A%3CmPort" href="https://docs.splunk.com/Documentation/Splunk/9.0.2/RESTREF/RESTcluster#:~:text=content%3E%0A%20%20%3C/entry%3E%0A%3C/feed%3E-,cluster/manager/indexes,-https%3A//%3Chost%3E%3A%3CmPort" target="_blank" rel="noopener noreferrer">https://docs.splunk.com/Documentation/Splunk/9.0.2/RESTREF/RESTcluster#:~:text=content%3E%0A%20%20%3C/entry%3E%0A%3C/feed%3E-,cluster/manager/indexes,-https%3A//%3Chost%3E%3A%3CmPort</A>)</SPAN></P> <P><SPAN>But the&nbsp;index_size returned in the response is different (much less) from the total I get, if I use the dbinspect command on a particular index, and add size for the db_&lt;buckets&gt;. i.e. originating buckets.</SPAN></P> <P><SPAN>Is the&nbsp;index_size supposed to denote something else? If so, it is not clearly mentioned in the API documentation.</SPAN></P> Mon, 12 Dec 2022 15:47:24 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-to-calculate-size-of-index-via-REST-API/m-p/623985#M9240 Commvault 2022-12-12T15:47:24Z