metadata about indexes (not per index)

[brettcave]

hi, I am wondering if there's a way to get summary data of all indexes, similar to the metadata command, but that returns a list of indexes and stats (e.g. index size). For example:

| indexmetadata | table IndexName IndexSize

[brettcave · Accepted solution]

This is one way:

| metadata type=hosts index="main" | eval indexName="main" | append [ metadata type=hosts index="custom1" | eval indexName="custom1" ] | stats sum(totalCount) as Count by indexName

[brettcave]

This is one way:

| metadata type=hosts index="main" | eval indexName="main" | append [ metadata type=hosts index="custom1" | eval indexName="custom1" ] | stats sum(totalCount) as Count by indexName