https://community.splunk.com/t5/Splunk-Search/Find-size-in-bytes-of-search-results/m-p/44310#M10451 <PRE><CODE>* | eval l=len(_raw) | stats sum(l) count by source </CODE></PRE> Tue, 15 Feb 2011 05:10:52 GMT Ron_Naken 2011-02-15T05:10:52Z https://community.splunk.com/t5/Splunk-Search/Find-size-in-bytes-of-search-results/m-p/44309#M10450 <P>I'm running a search that compiles its results in a table by source and displays the number of logs per source. I'm trying to also find the total size of the logs by source. Is this possible? I've tried using eval length=len(_raw), but that only gives the length of each individual log. </P> Tue, 15 Feb 2011 04:52:13 GMT https://community.splunk.com/t5/Splunk-Search/Find-size-in-bytes-of-search-results/m-p/44309#M10450 thepocketwade 2011-02-15T04:52:13Z https://community.splunk.com/t5/Splunk-Search/Find-size-in-bytes-of-search-results/m-p/44310#M10451 <PRE><CODE>* | eval l=len(_raw) | stats sum(l) count by source </CODE></PRE> Tue, 15 Feb 2011 05:10:52 GMT https://community.splunk.com/t5/Splunk-Search/Find-size-in-bytes-of-search-results/m-p/44310#M10451 Ron_Naken 2011-02-15T05:10:52Z https://community.splunk.com/t5/Splunk-Search/Find-size-in-bytes-of-search-results/m-p/44311#M10452 <P>Thanks, I knew it would turn out to be something simple I was missing</P> Tue, 15 Feb 2011 22:33:33 GMT https://community.splunk.com/t5/Splunk-Search/Find-size-in-bytes-of-search-results/m-p/44311#M10452 thepocketwade 2011-02-15T22:33:33Z