Splunk Enterprise

How to calculate bandwidth for a website from Splunk

Path Finder

Hi, I have a requirement where I need to calculate how much the data is flowing in and out of my web servers.

I have few fields in my logs like 

requested_content -> page/assets/image/css which is being requested.

size -> size of the page/assets/image/css.

Is there a possibility to calculate the bandwidth per day or per week?
I am not sure how to start with the query so any help or advice is appreciated.

Labels (1)
Tags (2)
0 Karma


Perhaps something like this?

... | timechart span=1d sum(size) as bandwidth
If this reply helps you, an upvote would be appreciated.
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!