I need to calculate the size of a clustered index, and I used this API for it:
/services/cluster/manager/indexes (https://docs.splunk.com/Documentation/Splunk/9.0.2/RESTREF/RESTcluster#:~:text=content%3E%0A%20%20%3...)
But the index_size returned in the response is different (much less) from the total I get, if I use the dbinspect command on a particular index, and add size for the db_<buckets>. i.e. originating buckets.
Is the index_size supposed to denote something else? If so, it is not clearly mentioned in the API documentation.
