About bharat

bharat · ‎08-27-2024

Hi @richgalloway thanks for your response. So my requirement is to show disk usage of every user for their searches. I tried with audit index but there I can see search name and it's count. I want to show the historical data of disk usage for each user.

bharat · ‎08-26-2024

Hi Splunkers, I'm trying to get diskusage for searches running by user. | rest /services/search/jobs | rex field=eventSearch "index\s*=(?<index>[^,\s)]+)" | search index=$ind$ | eval size_MB = diskUsage/1024/1024 | stats sum(size_MB) as size_MB by author | rename author as user Is there a way to get diskusage for historical log's like for a month or more. ?

Posts	2
Solutions	0
Karma Given	3
Karma Received	0
Member Since	‎08-26-2024

Online Status	Offline
Date Last Visited	‎03-20-2026 01:26 PM

REST Splunk job

Re: REST Splunk job

REST Splunk job

Join the Conversation

REST Splunk job

Re: REST Splunk job

REST Splunk job