I would like to add a new indexer site to our distributed Splunk deployment but would like this new site to contain a single copy of all of the data that's currently in the deployment. To do this, I want to get the size of the entirety of 1 copy of our Splunk data. This will help me size the new site.
We have a monitoring console and the Indexes and Volumes metric has an "Index Size" -> "Total Across Deployment".
Does that number include replicated data or is this the total size of 1 copy of the data?
Yes, that number includes replication. Divide the numbers by your replication factor.