Splunk Search

How do i create a search such that i'll be able to know how many bytes have passed through daily

Engager

Hi, i would like to ask if im able to create a search such that i'll be able to show it in my dashboard on how many bytes have passed through each day. the data i'm using is the one that they gave from the Splunk tutorial. Please help!!

Tags (3)
0 Karma
1 Solution

Ultra Champion

If you install the Splunk Deployment Monitor, you will get these metrics in a couple of dashboards. Oh, and I believe that you have similar functionality under Status -> Index/Indexing Overview in the Search app. Sorry, I don't remember the exact name of the menu option, no splunk in front of me right now.

Since these views are built on saved searches, you can study them for educational purposes.

/K

View solution in original post

Ultra Champion

If you install the Splunk Deployment Monitor, you will get these metrics in a couple of dashboards. Oh, and I believe that you have similar functionality under Status -> Index/Indexing Overview in the Search app. Sorry, I don't remember the exact name of the menu option, no splunk in front of me right now.

Since these views are built on saved searches, you can study them for educational purposes.

/K

View solution in original post

State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!