<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Discrepancy with License Usage in Splunk Enterprise</title>
    <link>https://community.splunk.com/t5/Splunk-Enterprise/Discrepancy-with-License-Usage/m-p/678860#M18768</link>
    <description>&lt;P&gt;No. You should _not_ tag people when asking questions.&lt;/P&gt;&lt;P&gt;This is a community-driven forum when people voluntarily help others in their own time. Tagging people when asking question can be perceived as demanding answer from such person. You can demand... well, if you buy a paid consultancy service, quite frankly.&lt;/P&gt;&lt;P&gt;This is a place for sharing ideas and experiences, it's not meant as a replacement for support or as a free labor.&lt;/P&gt;</description>
    <pubDate>Tue, 27 Feb 2024 15:43:27 GMT</pubDate>
    <dc:creator>PickleRick</dc:creator>
    <dc:date>2024-02-27T15:43:27Z</dc:date>
    <item>
      <title>Discrepancy with License Usage</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Discrepancy-with-License-Usage/m-p/678826#M18763</link>
      <description>&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Hi Team,&lt;/P&gt;&lt;P&gt;We are facing discrepancy with Splunk License total usage vs Index wise usage.&lt;/P&gt;&lt;P&gt;Could you please help us on this?&amp;nbsp;&lt;/P&gt;&lt;P&gt;Our Actual Splunk Stack is 50GB.&lt;/P&gt;&lt;P&gt;1. Index wise License Usage:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MicrosoftTeams-image (4).png" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/29506i7C0E228B28F301DF/image-size/large?v=v2&amp;amp;px=999" role="button" title="MicrosoftTeams-image (4).png" alt="MicrosoftTeams-image (4).png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;for individual index for 1 index showing 65.46GB for the same day Total usage we are getting 55.42GB as shown in below screen shots.&lt;/P&gt;&lt;P&gt;2. Total License Usage:&lt;/P&gt;&lt;P&gt;This is the Overall License usage for Feb 15.&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MicrosoftTeams-image (5).png" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/29507i7A7A3FF5FA094507/image-size/large?v=v2&amp;amp;px=999" role="button" title="MicrosoftTeams-image (5).png" alt="MicrosoftTeams-image (5).png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Kindly assist us with License Usage query based on index wise and it should match with the total License Usage and indicate any changes that need to be made at the server or configuration level.&lt;/P&gt;&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352"&gt;@gcusello&lt;/a&gt;&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/214410"&gt;@isoutamo&lt;/a&gt;&amp;nbsp;&lt;SPAN&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/231884"&gt;@PickleRick&lt;/a&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;P&gt;Siva.&lt;/P&gt;</description>
      <pubDate>Tue, 27 Feb 2024 13:50:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Discrepancy-with-License-Usage/m-p/678826#M18763</guid>
      <dc:creator>sivakrishna</dc:creator>
      <dc:date>2024-02-27T13:50:16Z</dc:date>
    </item>
    <item>
      <title>Re: Discrepancy with License Usage</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Discrepancy-with-License-Usage/m-p/678840#M18765</link>
      <description>&lt;P&gt;1. You posted the same question twice already.&lt;/P&gt;&lt;P&gt;2. Calling out specific people to help you is simply rude.&lt;/P&gt;&lt;P&gt;3. It's a case for support.&lt;/P&gt;</description>
      <pubDate>Tue, 27 Feb 2024 13:57:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Discrepancy-with-License-Usage/m-p/678840#M18765</guid>
      <dc:creator>PickleRick</dc:creator>
      <dc:date>2024-02-27T13:57:08Z</dc:date>
    </item>
    <item>
      <title>Re: Discrepancy with License Usage</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Discrepancy-with-License-Usage/m-p/678844#M18766</link>
      <description>&lt;P&gt;Hi Rick,&lt;/P&gt;&lt;P&gt;My apologize for that. I am not aware of this.&lt;/P&gt;&lt;P&gt;We are actually rushing on this issue bcz its on priority in our PROD environment.&lt;/P&gt;&lt;P&gt;I dnt know how to tag people earlier i have posted without tagging.&lt;/P&gt;&lt;P&gt;I won't repeat this again.&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;P&gt;Siva&lt;/P&gt;</description>
      <pubDate>Tue, 27 Feb 2024 14:23:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Discrepancy-with-License-Usage/m-p/678844#M18766</guid>
      <dc:creator>sivakrishna</dc:creator>
      <dc:date>2024-02-27T14:23:48Z</dc:date>
    </item>
    <item>
      <title>Re: Discrepancy with License Usage</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Discrepancy-with-License-Usage/m-p/678860#M18768</link>
      <description>&lt;P&gt;No. You should _not_ tag people when asking questions.&lt;/P&gt;&lt;P&gt;This is a community-driven forum when people voluntarily help others in their own time. Tagging people when asking question can be perceived as demanding answer from such person. You can demand... well, if you buy a paid consultancy service, quite frankly.&lt;/P&gt;&lt;P&gt;This is a place for sharing ideas and experiences, it's not meant as a replacement for support or as a free labor.&lt;/P&gt;</description>
      <pubDate>Tue, 27 Feb 2024 15:43:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Discrepancy-with-License-Usage/m-p/678860#M18768</guid>
      <dc:creator>PickleRick</dc:creator>
      <dc:date>2024-02-27T15:43:27Z</dc:date>
    </item>
  </channel>
</rss>

