Is to possible to find indexing volume without using any internal indexes

[sivaranjiniG]

i need to find daily indexing volume but without using any internal indexes..

[isoutamo]

You could count length of all event together and get some kind of estimate for volume. But the best/only real way is to use internal index where splunk stores that information.