I want to calculate the total volume of logs index per day for a particular index. is there any search query for the same ?
Try this query:
index=_internal source=*metrics.log group=per_index_thruput series=<a particular index>
| eval GB=kb/1024/1024 | timechart span=1d sum(GB) as GB | eval GB=round(GB,2)
View solution in original post
Try Meta Woot! app. It breaks down license usage even to the host level.