Monitoring Splunk

How to find how much storage is used from logs?


I have a index which would return logs. I would like to know how much storage is used for logs in a specific time range. How could I write the query or do this from UI? Thanks.

Labels (2)
0 Karma


There is no log that contains that information. The closest you can get is the dbinspect command.

| dbinspect index=foo | stats sum(sizeOnDiskMB) as DiskMB

The command looks at buckets rather than events so the storage size given may include data outside the specified time range.

If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Index This | A sphere has three, a circle has two, and a point has zero. What is it?

September 2023 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...