Hi, team
I want to fetch output like shown below. I want to fetch amount of data consumed by particular index (for eg. index="abc") on different dates. Could anyone help me out for this issue
Index | Date | GB |
abc | 27-02-2021 | 10.09 |
28-02-2021 | 11.54 | |
01-03-2021 | 09.00 |
Thanks
What data do you have available to work with?
I have machine logs which is pushed by splunk forwarder but have limited amount of data to store. For this, I would to like to know on which date how much data consumed by particular index