https://community.splunk.com/t5/Installation/License-Usage/m-p/683989#M13796 <P>The search did not work. Looks like it is may be cause by the data index. I checked the monitoring console and did a health check. showing License warning and violations. Category showing data indexing.</P> Fri, 12 Apr 2024 01:31:45 GMT ASE 2024-04-12T01:31:45Z https://community.splunk.com/t5/Installation/License-Usage/m-p/683978#M13794 <P><STRONG>Hello!</STRONG></P><P><STRONG>We keep going over our license usage. We cant seem to find what is causing us to go over. we've gone over 3 times now. Any suggestion on how to find what is causing this, please?</STRONG></P> Thu, 11 Apr 2024 22:51:18 GMT https://community.splunk.com/t5/Installation/License-Usage/m-p/683978#M13794 ASE 2024-04-11T22:51:18Z https://community.splunk.com/t5/Installation/License-Usage/m-p/683984#M13795 <P>This will show you your ingest usage by sourcetype</P><P>&nbsp;</P><LI-CODE lang="markup">index=_internal source=/opt/splunk/var/log/splunk/license_usage.log type=Usage | timechart limit=40 sum(b) as data by st</LI-CODE><P>&nbsp;</P><P>Look at the monitoring console, that will also give you information on your sourcetypes/index ingestion</P> Fri, 12 Apr 2024 00:16:32 GMT https://community.splunk.com/t5/Installation/License-Usage/m-p/683984#M13795 bowesmana 2024-04-12T00:16:32Z https://community.splunk.com/t5/Installation/License-Usage/m-p/683989#M13796 <P>The search did not work. Looks like it is may be cause by the data index. I checked the monitoring console and did a health check. showing License warning and violations. Category showing data indexing.</P> Fri, 12 Apr 2024 01:31:45 GMT https://community.splunk.com/t5/Installation/License-Usage/m-p/683989#M13796 ASE 2024-04-12T01:31:45Z