Solved: index event count - Splunk Community

Splunk Search

How can I get the total number of events occurred in a particular day for all my indexes?

1 Solution

Solution

Like this :

index=_internal sourcetype=splunkd group=per_index_thruput | stats sum(ev) as events by series | rename series as index

View solution in original post

Solution

Like this :

index=_internal sourcetype=splunkd group=per_index_thruput | stats sum(ev) as events by series | rename series as index

Get Updates on the Splunk Community!

Automating Threat Operations and Threat Hunting with Recorded Future

Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register Is your ...

Keep the Learning Going with the New Best of .conf Hub

Hello Splunkers, With .conf26 getting closer, there’s already a lot of excitement building around this year’s ...

Splunk Community Badges!

Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...