# Index size and shards

**URL:** <https://discuss.elastic.co/t/index-size-and-shards/88115>\
**Category:** Elasticsearch\
**Created:** [June 2, 2017, 4:21pm UTC](https://discuss.elastic.co/t/index-size-and-shards/88115 "2017-06-02T16:21:54Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![kernelpanic](https://avatars.discourse-cdn.com/v4/letter/k/c89c15/32.png) [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\
**Post date:** [June 2, 2017, 4:21pm UTC](https://discuss.elastic.co/t/index-size-and-shards/88115/1 "2017-06-02T16:21:54Z")

</div>

Hello, I've got an index for syslog events from a Cisco firewall - when I run **GET /syslogcisco-2017.06/\_stats/store** I get the following output:

```
{
  "_shards": {
    "total": 6,
    "successful": 6,
    "failed": 0
  },
  "_all": {
    "primaries": {
      "store": {
        "size_in_bytes": 9114820610,
        "throttle_time_in_millis": 0
      }
    },
    "total": {
      "store": {
        "size_in_bytes": 17411633378,
        "throttle_time_in_millis": 0
      }
    }
  },
  "indices": {
    "syslogcisco-2017.06": {
      "primaries": {
        "store": {
          "size_in_bytes": 9114820610,
          "throttle_time_in_millis": 0
        }
      },
      "total": {
        "store": {
          "size_in_bytes": 17411633378,
          "throttle_time_in_millis": 0
        }
      }
    }
  }
}

```

I am wondering which statistic to use for the total size of the index and does that include all shards or are the size stats per shard?

Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 30, 2017, 4:22pm UTC](https://discuss.elastic.co/t/index-size-and-shards/88115/2 "2017-06-30T16:22:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
