Indexes size and EPS

Description:

SPL request to display by index :

  • Index name
  • Index size
  • Events sum, min, avg, max, perc95
  • Events sum, min, avg, max, perc95 to work hours (8am-6pm)

Required:

  • Splunk license

Query:

Share This:
Tagged:

Leave A Comment?