https://community.splunk.com/t5/Other-Usage/log-consumption/m-p/688411#M1759 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/262891">@yuvaraj_m91</a>&nbsp;,</P><P>you already have this search in the License Consuption Report, the problem is that usually you don't maintain six months of internal logs.</P><P>You could run a search avery day saving the results in a summary index, you you'll have a very performant search and all the data also more than the retention.</P><P>You could also run a search summing the lenght of each event of each index, but it will be very very slow search.</P><P>Ciao.</P><P>Giuseppe</P> Thu, 23 May 2024 06:58:15 GMT gcusello 2024-05-23T06:58:15Z https://community.splunk.com/t5/Other-Usage/log-consumption/m-p/688410#M1758 <P>Looking for spl query to get the index wise log consumption for each months splitup for last 6 months</P> Thu, 23 May 2024 06:54:46 GMT https://community.splunk.com/t5/Other-Usage/log-consumption/m-p/688410#M1758 yuvaraj_m91 2024-05-23T06:54:46Z https://community.splunk.com/t5/Other-Usage/log-consumption/m-p/688411#M1759 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/262891">@yuvaraj_m91</a>&nbsp;,</P><P>you already have this search in the License Consuption Report, the problem is that usually you don't maintain six months of internal logs.</P><P>You could run a search avery day saving the results in a summary index, you you'll have a very performant search and all the data also more than the retention.</P><P>You could also run a search summing the lenght of each event of each index, but it will be very very slow search.</P><P>Ciao.</P><P>Giuseppe</P> Thu, 23 May 2024 06:58:15 GMT https://community.splunk.com/t5/Other-Usage/log-consumption/m-p/688411#M1759 gcusello 2024-05-23T06:58:15Z