About deepak_acalvio

deepak_acalvio · ‎05-03-2018

You can use clean eventdata to clean the index completely if needed.

deepak_acalvio · ‎02-08-2018

This is the correct answer, worked for me. Thanks for explaining about using OR as well.

deepak_acalvio · ‎01-23-2017

You can use license_usage.log file as suggested by SloshBurch. here is the query: index=_internal source="*license_usage.log*" type=Usage | stats sum(eval(b/1024/1024)) AS volume_b by s This will give you size of each source in MBs.

Posts	3
Solutions	0
Karma Given	12
Karma Received	2
Member Since	‎07-18-2016

Online Status	Offline
Date Last Visited	‎09-21-2021 02:52 PM

Re: delete events from _internal index

Re: How to remove all null fields to prevent gaps ...

Re: How to show the total size of events from a so...