I have a number of Linux systems that are reporting to the OS index
I need to move to an Organizational index
I can do this using the deployment server since they are all reporting to the DS
The organization is being charged by the amount of data they put in there index each day
I have a list of hosts [index=os host=server1 OR host=server2 OR host=server3 OR host=etc]
What would be the best way to fashion a search to see how much data per day will be added to the ORG index whan I move the 93 systems to the new index?