Hello All,
Need to calculate size of the data for each server, but not raw indexed size for over the time period?
Thanks
Sathish
It is unclear but maybe you can get what you need from the Data Summary
:
http://docs.splunk.com/Documentation/Splunk/6.2.4/SearchTutorial/Aboutthesearchapp#Data_summary
Please specify exactly what you want. "size of the data for each server", can also be interpreted as "raw indexed size"
if raw data get indexed size will be get increase am right?