how do i caculate amount of mb indexed for last 30 days ??

[rakesh_498115]

Hi

I am using an index="mydata" and sourcetype="my_data" . i want to calcate the total mb indexed for last the 30 days for my index. and is it possible to calucate by source files ??

Pls help.

[sdaniels · Accepted solution]

You can use this view in your search app. This will give you total in MB for each of your indexes and you can quickly total. Anything with an underscore is an internal Splunk index.

http://:8000/en-US/app/search/indexing_volume

[Rob]

You may want to take a look at the following wiki page:

http://wiki.splunk.com/Community:Troubleshooting_Monitor_Inputs

It gives several options for finding the indexed data volume based on the version of Splunk you are using as well as come additional info and caveats.