topic Re: How can we find out volume of logs queried in Splunk? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-can-we-find-out-volume-of-logs-queried-in-Splunk/m-p/603217#M209929 <P>Yeah, I'm pretty sure that information is not readily available.</P><P>I'm still wondering what problem you're trying to solve.&nbsp; If you want to reduce the data you ingest to match what users search for then knowing the volume won't help.</P> Fri, 24 Jun 2022 21:24:05 GMT richgalloway 2022-06-24T21:24:05Z How can we find out volume of logs queried in Splunk? https://community.splunk.com/t5/Splunk-Search/How-can-we-find-out-volume-of-logs-queried-in-Splunk/m-p/603194#M209919 <P>How can we find out volume of logs queried in Splunk</P> Fri, 24 Jun 2022 18:42:17 GMT https://community.splunk.com/t5/Splunk-Search/How-can-we-find-out-volume-of-logs-queried-in-Splunk/m-p/603194#M209919 kml_uvce 2022-06-24T18:42:17Z Re: How can we find out volume of logs queried in Splunk? https://community.splunk.com/t5/Splunk-Search/How-can-we-find-out-volume-of-logs-queried-in-Splunk/m-p/603204#M209923 <P>What volume do you seek?&nbsp; Data read from disk, data returned to the SH, data returned to the user, or something else?&nbsp; AFAIK, there's no good way to measure any of those aside from what's in the dispatch directory and search log (neither of which is indexed).</P><P>What problem are you trying to solve?</P> Fri, 24 Jun 2022 19:01:47 GMT https://community.splunk.com/t5/Splunk-Search/How-can-we-find-out-volume-of-logs-queried-in-Splunk/m-p/603204#M209923 richgalloway 2022-06-24T19:01:47Z Re: How can we find out volume of logs queried in Splunk? https://community.splunk.com/t5/Splunk-Search/How-can-we-find-out-volume-of-logs-queried-in-Splunk/m-p/603205#M209924 <P>I am looking for&nbsp;<SPAN>data returned to the SH and data returned to the user,I want to know that how much data is queried(not total but unique) vs how much data is not used or not queried&nbsp;by any user or scheduled&nbsp;search.</SPAN></P> Fri, 24 Jun 2022 19:09:23 GMT https://community.splunk.com/t5/Splunk-Search/How-can-we-find-out-volume-of-logs-queried-in-Splunk/m-p/603205#M209924 kml_uvce 2022-06-24T19:09:23Z Re: How can we find out volume of logs queried in Splunk? https://community.splunk.com/t5/Splunk-Search/How-can-we-find-out-volume-of-logs-queried-in-Splunk/m-p/603217#M209929 <P>Yeah, I'm pretty sure that information is not readily available.</P><P>I'm still wondering what problem you're trying to solve.&nbsp; If you want to reduce the data you ingest to match what users search for then knowing the volume won't help.</P> Fri, 24 Jun 2022 21:24:05 GMT https://community.splunk.com/t5/Splunk-Search/How-can-we-find-out-volume-of-logs-queried-in-Splunk/m-p/603217#M209929 richgalloway 2022-06-24T21:24:05Z