How write search query for Sumologic to find stored ingest budget?

Question

I have a requirement to find Sumologic Ingest budget data via a search and then schedule it. Any idea which _index I should be using for this ? I did search all the sumologic document but couldnt find concrete material to get this through. Anyone with any ideas please direct me

score 1 · Accepted Answer · answered Jul 13 '22 at 10:34

1

Try this:

_index=sumologic_audit _sourceName=VOLUME_QUOTA _sourceCategory=account_management "Budget" "last reset" "Approaching"

or similar

taken from the Sumo Logic docs on Managing Ingestion Volume

Disclaimer: I am currently employed by Sumo Logic

answered Jul 13 '22 at 10:34

Grzegorz Oledzki

23,614
16
68
106

Thanks @ Grzegorz Oledzki ....... I had tried that from Sumo Docs but that ones doesnt come up with Ingest budget names. I was more concerned about the names – Ashirwad.nivalkar Jul 13 '22 at 11:49
When I try, I see messages like this: `Budget analytics with scope _sourcecategory=analytics* consumed 85.00% of capacity since last reset.` The second word here is the name of the budget – Grzegorz Oledzki Jul 13 '22 at 13:29
Okay gotcha .... But can we display it in columnar form? – Ashirwad.nivalkar Jul 14 '22 at 07:31
You can use the "transpose" operator to form columns. – Grzegorz Oledzki Jul 14 '22 at 13:56

How write search query for Sumologic to find stored ingest budget?

1 Answers1