Is there anyway to check how much log is being generated with DEBUG log mode for a particular index?Let say if index name is my_index and I need to check what is size of log generated for DEBUG mode logindex=my_index DEBUG@woodcock plz help 🙂
| eval len=length(_raw)
| timechart span=1d sum(len) as len_byte
| eval GB=round(len_byte/1024/1024/1024,2)
how about this? @iqbalintouch
View solution in original post
| tstats count where index=my_index TERM("DEBUG") by _time span=1d
@iqbalintouch how about this?
@to4kawa thank you for the response. I am getting the result but not sure if that is showing log size..if yes, is there way to convert in GB size?
This query counts the events.How much is your one event size?
| eval GB=round(count * <your event size(byte)> / 1024 /1024 ,2)
Unfortunately, that I don't know how much data is being sent in a single event since we are seeing these events in REQUEST/RESPONSE which we send/receive from a third party. 😞
@to4kawa thank you, this is great help.sorry for the late response, also could you please explain the query..how it is calculating 🙂
#1 search the text "DEBUG"#2 calculate the event by length()(unit: byte)#3 aggregate for bytes#4 calculate by Giga Byte.