Calculate the size of logs in a specific time period

Elastic Stack Kibana
1

Hi,

We can see that in a specific 12 hour period, we have 1.3 million log entries. We want to see how much disk space was consumed by this. We thought we could just add 'bytes' as a metric to the graph. However, bytes appears to be greyed out.

How could we obtain this information in another fashion? Could we write something in the dev console?

Many thanks in advance.

2

Hi @nickmannouch Welcome to the community...

What version are you on?

Unfortunately this is harder than it should be...

You can use the Disk Usage API here

That will show the entire index so you will need to multiply the ratio of your 12 hours of Docs vs Total Docs

You can also simply run

GET _cat/indices?v&s=store.size:desc

That will also show the size of the Index on Disk ...
It will show you the number of Documents
You can run Discover and get the Number of Documents in 12 hours then do the division.
Remember if you have are replica make sure to use store.size not pri.store.size

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.