Im looking to find the total amount of data that was ingested for a particular index. We usually use out deployment server for this but it only shows me the top 10 indexes. I need to find an index that is not in the top 10.
The slowest but typically the most accurate method is to do a search like this:
<your data> | eval len = len(_raw) | stats sum(len) as totalBytes
As woodcock said, use the dashboards in the monitoring console. You can split by indexer etc.
You should setup a Monitoring Console and it has everything that you can imagine.
so today we use the monitoring console to check current and past license usage but that still only shows me the top 10 indexes. is there a way through the MC to look at just one index?
Just hover in the lower right and click on open in new search
and you can modify any search to do what you need (get more than just 10).