make a shell script to monitor directory size for each apps
create monitor in inputs.conf with specified index & sourcetype and link it to shell script for each apps
Make a field from selected pattern, name it index_size
use querry:
index=existing_index_0 OR index=existing_index_n
|stats latest(index_size) as Size, count as total_events, earliest(_time) as FirstAppearance, latest(_time) as LastAppearance
| fieldformat FirstAppearance=strftime(FirstAppearance,"%x %X")
| fieldformat LastAppearance=strftime(LastAppearance,"%x %X")
... View more