Oh Hai Splunkers!
I've been trying to find out how much disk is being used and the associated compression ratio for a specific index. There's been some great examples using dbinspect like the following:
| dbinspect index=myIndexName
| fields state,id,rawSize,sizeOnDiskMB
| stats sum(rawSize) AS rawTotal, sum(sizeOnDiskMB) AS diskTotalinMB
| eval rawTotalinMB=(rawTotal / 1024 / 1024) | fields - rawTotal
| eval compression=tostring(round(diskTotalinMB / rawTotalinMB * 100, 2)) + "%"
| table rawTotalinMB, diskTotalinMB, compression
The output of this is what I'm after but I'm using a clustered environment, and am wondering if the sizeOnDiskMB value includes the replication factor or not?
For example, if I have an effective RF of 2, would I have to device the results of the above search by two to get the true size value of a single copy of the data?
Thanks in advance!
... View more