how to check data ingestion trend for today?

[Praz_123]

How we can check the data coming to Splunk creating problem to CM making it unstable leading the peers to reach more than 2k+ and also RF and SF are red .

[Praz_123]

@gcusello 

Thanks for your reply but the problem is am not able to find like which index is causing the issue at the point of time which making the bucket count increase also .

How can we see the data ingestion trend for today?

[gcusello]

Hi @Praz_123 ,

as I s<id, in the License consuption page or in the Monitoring Console, you can see the ingestion rate for each index.

Ciao.

Giuseppe

[gcusello]

Hi @Praz_123 ,

before checking the volume of data, check if you have connection issues (also temporary) between Indexers and CM.

You should have messages.

Anyway, to check te volume of indexed data, you can use the License Monitoring feature in Settings or the Monitoring Console.

Ciao.

Giuseppe