Hello,
I am trying to collect key data metrics regarding search volumes accessing the varying tiers of Splunk Storage Buckets.
For example, I would love to see a report that says
xx% of searches are accessing warm buckets only
xx% of searches are accessing both warm and cold buckets
So far the only hope I've seen thus far is watching Disk IO volume for the cold mounts to get a idea of "how busy it is", and I am hoping for better information from Splunk Itself.
