How to calculate compression by sourcetype?

the_wolverine · ‎11-11-2013

I know how to use dbinspect to calculate compression by index. Is there a way to calculate compression by sourcetype for an index with mixed sourcetypes?

_d_ · ‎11-11-2013

Next to impossible. We don't keep track of different sourcetypes' rawdata and their corresponding size of the tsidx files.

How to calculate compression by sourcetype?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Rounding off the Splunk Dashboard Contest

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

Splunk Technical Support Is Moving to Cisco Support Tools

Join the Conversation

How to calculate compression by sourcetype?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Rounding off the Splunk Dashboard Contest

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

Splunk Technical Support Is Moving to Cisco Support Tools