How to edit my search to find the volume used in "auto generated pool enterprise" in MB?

[seema2502]

Hi Team,

currently volume used is 24.458MB
Pools Indexers Volume used today

auto_generated_pool_enterprise * 24,458 MB / 66,560 MB Edit | Delete
eeukrp0035 24,458 MB (36.745%)
but the search i am using isn't giving the correct output :-

index=_internal metrics kb group="per_index_thruput" series!=_* | eval totalGB = (kb / 1024) / 1024 | timechart span=1d sum(totalGB) as total

Can you please help me to get the exact search that will generate the correct output?

Thanks,
Seema

[lukas_loder]

Hi Seema

I've just seen, that you wrote
index=internal wouldn't index=_internal be correct?

[seema2502]

sorry its typo, command which i am using, is as below :-

index=_internal metrics kb group="per_index_thruput" series!=_* | eval totalGB = (kb / 1024) / 1024 | timechart span=1d sum(totalGB) as total 

[seema2502]

i am not sure why _ is not visible.