Splunk Search
Highlighted

how much data coming to an index

Path Finder

hi,

Is there any way we couldn't find out how much data coming to an particular index ?

0 Karma
Highlighted

Re: how much data coming to an index

Legend

I suggest that you use the Monitoring Console and look at the indexing dashboards.

0 Karma
Highlighted

Re: how much data coming to an index

Communicator
0 Karma
Highlighted

Re: how much data coming to an index

SplunkTrust
SplunkTrust

Here's a posted answer pretty close to what you need. http://answers.splunk.com/answers/154773/how-to-create-a-report-that-shows-max-indexed-volume-per-da...

Also, I noticed a useful search by sourcetype over on the Big Book of Splunk Searches. If your sourcetypes are unique by index, then that would work for you.

0 Karma