SPL
Show how much disk space is used by _internal
Description
The following Splunk query will return disk space used by the _internal index.
0 1
index=_internal source=*license_usage.log type=Usage | eval gb=b/1024/1024/1024 | timechart span=1d sum(gb) as GB by host useother=false | untable _time host gb | top limit=1 host | join time [ search index=_internal source=*license_usage.log type=Usage | eval gb=b/1024/1024/1024 | timechart span=1d sum(gb) as GB by sourcetype useother=false |untable _time sourcteype sum(GB)]
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.