Solved: Query to get daily amount of data in GB per index

bcastine · ‎10-07-2015

I am trying to figure out a search to get the amount of data in GB coming into Splunk per index. When we have huge spikes in our data, I am looking for a quick way to see which index is the culprit so I can drill down from there. Maybe something that searches all indexes and throws them into a grid.
Thank you.

richgalloway · ‎10-07-2015

Install the Splunk On Splunk app and select Indexing->Indexing and Forwarding. That will show the top 10 indexes by volume.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway · ‎10-07-2015

Install the Splunk On Splunk app and select Indexing->Indexing and Forwarding. That will show the top 10 indexes by volume.

---
If this reply helps you, Karma would be appreciated.

Query to get daily amount of data in GB per index

Splunk Observability for AI

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Splunk Observability as Code: From Zero to Dashboard

Are you a member of the Splunk Community?

Query to get daily amount of data in GB per index

Splunk Observability for AI

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Splunk Observability as Code: From Zero to Dashboard