Can I determine the size of a source without reading the entire source?



I'd like to determine the size of certain sources, but don't want the overhead of reading the entire file. Is there a way to do this?

0 Karma

Ultra Champion

If it's already indexed (I can't tell from the post) you could use the license_usage.log to see how large the source was.

0 Karma

Esteemed Legend

Revered Legend

You can use a scripted input which will run frequently and capture and send file size to splunk.

0 Karma