https://community.splunk.com/t5/Getting-Data-In/How-would-I-find-License-usage-by-Field/m-p/633388#M108439 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/224743">@daniel_althoff8</a>,</P><P>It is not possible to carry out a punctual calculation of this kind, but you can see what the license consumption is for a given sourcetype and then see the field you want to analyze what statistical presence it has for the sourcetype and then make a proportion.</P><P>Ciao.</P><P>Giuseppe</P> Mon, 06 Mar 2023 07:13:34 GMT gcusello 2023-03-06T07:13:34Z https://community.splunk.com/t5/Getting-Data-In/How-would-I-find-License-usage-by-Field/m-p/633365#M108438 <P>How would I find license usage by field?</P> <P>For example; I want to know which field values within a specific sourcetype account for the greatest volume of events and license usage.</P> <P>&nbsp;</P> <P>Thanks in advance!</P> Mon, 06 Mar 2023 14:57:18 GMT https://community.splunk.com/t5/Getting-Data-In/How-would-I-find-License-usage-by-Field/m-p/633365#M108438 daniel_althoff8 2023-03-06T14:57:18Z https://community.splunk.com/t5/Getting-Data-In/How-would-I-find-License-usage-by-Field/m-p/633388#M108439 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/224743">@daniel_althoff8</a>,</P><P>It is not possible to carry out a punctual calculation of this kind, but you can see what the license consumption is for a given sourcetype and then see the field you want to analyze what statistical presence it has for the sourcetype and then make a proportion.</P><P>Ciao.</P><P>Giuseppe</P> Mon, 06 Mar 2023 07:13:34 GMT https://community.splunk.com/t5/Getting-Data-In/How-would-I-find-License-usage-by-Field/m-p/633388#M108439 gcusello 2023-03-06T07:13:34Z