Splunk Search

is it possible to know which is the index that has less use?

efaundez
Path Finder

good afternoon

  I would like to know which is the index that has had less access at the data query level.

regards

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Please explain more about the data you are looking for. What problem are you trying to solve?
Have you looked at the Monitoring Console?

---
If this reply helps you, Karma would be appreciated.
0 Karma

efaundez
Path Finder

Hello, sorry for the delay, with respect to what I mention the idea is to be able to know which are the least consulted indexes, by users. I know that internally, all the queries made by users to the cluster indexes could be searched, but in an estimate of 30 days, there should be indexes that do not have a lot of load, that is, the user does not use it frequently.

This search will allow us to know if this information is really important or useful, since if not, we plan to eliminate this index.

Cheers

0 Karma
Get Updates on the Splunk Community!

2024 Splunk Career Impact Survey | Earn a $20 gift card for participating!

Hear ye, hear ye! The time has come again for Splunk's annual Career Impact Survey!  We need your help by ...

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...