I have a index which would return logs. I would like to know how much storage is used for logs in a specific time range. How could I write the query or do this from UI? Thanks.
There is no log that contains that information. The closest you can get is the dbinspect command.
| dbinspect index=foo | stats sum(sizeOnDiskMB) as DiskMB
The command looks at buckets rather than events so the storage size given may include data outside the specified time range.