hi, I am wondering if there's a way to get summary data of all indexes, similar to the metadata command, but that returns a list of indexes and stats (e.g. index size). For example:
| indexmetadata | table IndexName IndexSize
This is one way:
| metadata type=hosts index="main" | eval indexName="main" | append [ metadata type=hosts index="custom1" | eval indexName="custom1" ] | stats sum(totalCount) as Count by indexName
This is one way:
| metadata type=hosts index="main" | eval indexName="main" | append [ metadata type=hosts index="custom1" | eval indexName="custom1" ] | stats sum(totalCount) as Count by indexName
This is one way:
| metadata type=hosts index="main" | eval indexName="main" | append [ metadata type=hosts index="custom1" | eval indexName="custom1" ] | stats sum(totalCount) as Count by indexName