Calculate size of INCOMING logs

Hi there,
I haven’t yet found a solution to a problem that I’m facing.
Is there a way to calculate the size in bytes of the logs that were sent to Graylog?
I am aware of the metric gl2_accounted_message_size, however I am looking for a way to get the size of only the message field, i.e. only the data that is ingested, not the enriched data that is stored in Elasticsearch.

Any way of doing this?

In the Input you will have some networkdata aggregated:
maybe this helps, but you can not really search for it. It’s the closest you can get I assume.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.