Splunk Search

How do check the number of events of an index?

perlish
Communicator

For example, I have added some other indexes, I want to know that whether the events have been sent into the corresponding index ?
And I also want to know that the NUMBER of events of that index?

Tags (3)
0 Karma
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

The easiest way is probably using eventcount:

| eventcount index=myindex

http://docs.splunk.com/Documentation/Splunk/5.0.3/SearchReference/Eventcount

Note that dbinspect is good, but will not work in a distributed cluster, thought it can be run independently on each indexer.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

The easiest way is probably using eventcount:

| eventcount index=myindex

http://docs.splunk.com/Documentation/Splunk/5.0.3/SearchReference/Eventcount

Note that dbinspect is good, but will not work in a distributed cluster, thought it can be run independently on each indexer.

Ayn
Legend
0 Karma

martin_mueller
SplunkTrust
SplunkTrust
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...