Monitoring Splunk

How to find how much storage is used from logs?

xwang333
Engager

I have a index which would return logs. I would like to know how much storage is used for logs in a specific time range. How could I write the query or do this from UI? Thanks.

Labels (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

There is no log that contains that information. The closest you can get is the dbinspect command.

| dbinspect index=foo | stats sum(sizeOnDiskMB) as DiskMB

The command looks at buckets rather than events so the storage size given may include data outside the specified time range.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...