Getting Data In

Is there a way to see how much data we are getting in from Active Directory, Exchange and Radius (size of the indexes/number of days the data goes back)?

dkr3500
Path Finder

Is there a way to see how much data we are getting in from Active Directory, Exchange and Radius (size of the indexes/number of days the data goes back)?

Splunk version: 6.5.3
Enterprise distributed environment.

Tags (1)
0 Karma
1 Solution

jdhunter
Path Finder

Do you have all the data going to one index? Have you created a separate index for each? Have you setup the Monitoring Console for your deployment? If you haven't setup the Monitoring Console, I would set that up. There is a lot of valuable information about your Splunk Environment to be gained.

https://docs.splunk.com/Documentation/Splunk/7.1.2/DMC/DMCoverview

If you have the Monitoring Console Setup, Navigate to Monitoring Console > Indexing > Indexes and Volumes > Index Detail: Deployment > Filter on the Index of Interest.

This dashboard gives you an Overview of your data for that Index including Size and Median Data age.

View solution in original post

0 Karma

jdhunter
Path Finder

Do you have all the data going to one index? Have you created a separate index for each? Have you setup the Monitoring Console for your deployment? If you haven't setup the Monitoring Console, I would set that up. There is a lot of valuable information about your Splunk Environment to be gained.

https://docs.splunk.com/Documentation/Splunk/7.1.2/DMC/DMCoverview

If you have the Monitoring Console Setup, Navigate to Monitoring Console > Indexing > Indexes and Volumes > Index Detail: Deployment > Filter on the Index of Interest.

This dashboard gives you an Overview of your data for that Index including Size and Median Data age.

0 Karma

adonio
Ultra Champion
0 Karma
Get Updates on the Splunk Community!

BORE at .conf25

Boss Of Regular Expression (BORE) was an interactive session run again this year at .conf25 by the brilliant ...

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...

UCC Framework: Discover Developer Toolkit for Building Technology Add-ons

The Next-Gen Toolkit for Splunk Technology Add-on Development The Universal Configuration Console (UCC) ...