Monitoring Splunk

How to calculate size of index via REST API?

Commvault
New Member

I need to calculate the size of a clustered index, and I used this API for it:
/services/cluster/manager/indexes (https://docs.splunk.com/Documentation/Splunk/9.0.2/RESTREF/RESTcluster#:~:text=content%3E%0A%20%20%3...)

But the index_size returned in the response is different (much less) from the total I get, if I use the dbinspect command on a particular index, and add size for the db_<buckets>. i.e. originating buckets.

Is the index_size supposed to denote something else? If so, it is not clearly mentioned in the API documentation.

Tags (2)
0 Karma
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...