<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Real-time License Monitoring Search Error in Installation</title>
    <link>https://community.splunk.com/t5/Installation/Real-time-License-Monitoring-Search-Error/m-p/39681#M618</link>
    <description>&lt;P&gt;Believe that I may have this resolved.  &lt;/P&gt;

&lt;PRE&gt;index=_internal source=*metrics.log group=per_index_thruput series!=_* | eval totalMB = kb/1024 | chart sum(totalMB) as total&lt;/PRE&gt;</description>
    <pubDate>Mon, 30 Apr 2012 12:30:29 GMT</pubDate>
    <dc:creator>mchandx</dc:creator>
    <dc:date>2012-04-30T12:30:29Z</dc:date>
    <item>
      <title>Real-time License Monitoring Search Error</title>
      <link>https://community.splunk.com/t5/Installation/Real-time-License-Monitoring-Search-Error/m-p/39678#M615</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;I am writing a search to integrate with my dashboard.&lt;/P&gt;

&lt;P&gt;Goal:&lt;BR /&gt;&lt;BR /&gt;
Display current license usage in megabytes as an integer in a "Single Value" type graph.&lt;/P&gt;

&lt;P&gt;Error:&lt;BR /&gt;&lt;BR /&gt;
When I run the search, I get "N/A" back.&lt;/P&gt;

&lt;P&gt;Current Search:&lt;BR /&gt;&lt;BR /&gt;
index=&lt;EM&gt;internal source=metrics.log group=per_index_thruput series!=&lt;/EM&gt; | eval totalMB = kb/1024 | chart sum(totalMB) as total&lt;/P&gt;

&lt;P&gt;Any help is appreciated!&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 11:45:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Installation/Real-time-License-Monitoring-Search-Error/m-p/39678#M615</guid>
      <dc:creator>mchandx</dc:creator>
      <dc:date>2020-09-28T11:45:20Z</dc:date>
    </item>
    <item>
      <title>Re: Real-time License Monitoring Search Error</title>
      <link>https://community.splunk.com/t5/Installation/Real-time-License-Monitoring-Search-Error/m-p/39679#M616</link>
      <description>&lt;P&gt;Here is an example that works.  You can modify accordingly.&lt;/P&gt;

&lt;P&gt;index=_internal todaysbytesindexed startdaysago=30 | eval MB_Indexed = todaysBytesIndexed/1024/1024 | stats sum(MB_Indexed) by date_month&lt;/P&gt;

&lt;P&gt;There are also several references on this post.&lt;/P&gt;

&lt;P&gt;&lt;A href="http://splunk-base.splunk.com/answers/4897/how-to-determine-daily-license-usage-in-gb" target="_blank"&gt;http://splunk-base.splunk.com/answers/4897/how-to-determine-daily-license-usage-in-gb&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 11:45:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Installation/Real-time-License-Monitoring-Search-Error/m-p/39679#M616</guid>
      <dc:creator>sdaniels</dc:creator>
      <dc:date>2020-09-28T11:45:23Z</dc:date>
    </item>
    <item>
      <title>Re: Real-time License Monitoring Search Error</title>
      <link>https://community.splunk.com/t5/Installation/Real-time-License-Monitoring-Search-Error/m-p/39680#M617</link>
      <description>&lt;P&gt;I have tried this before as this is what is in the documentation, but it displays the incorrect information.&lt;/P&gt;</description>
      <pubDate>Mon, 30 Apr 2012 12:27:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Installation/Real-time-License-Monitoring-Search-Error/m-p/39680#M617</guid>
      <dc:creator>mchandx</dc:creator>
      <dc:date>2012-04-30T12:27:13Z</dc:date>
    </item>
    <item>
      <title>Re: Real-time License Monitoring Search Error</title>
      <link>https://community.splunk.com/t5/Installation/Real-time-License-Monitoring-Search-Error/m-p/39681#M618</link>
      <description>&lt;P&gt;Believe that I may have this resolved.  &lt;/P&gt;

&lt;PRE&gt;index=_internal source=*metrics.log group=per_index_thruput series!=_* | eval totalMB = kb/1024 | chart sum(totalMB) as total&lt;/PRE&gt;</description>
      <pubDate>Mon, 30 Apr 2012 12:30:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Installation/Real-time-License-Monitoring-Search-Error/m-p/39681#M618</guid>
      <dc:creator>mchandx</dc:creator>
      <dc:date>2012-04-30T12:30:29Z</dc:date>
    </item>
    <item>
      <title>Re: Real-time License Monitoring Search Error</title>
      <link>https://community.splunk.com/t5/Installation/Real-time-License-Monitoring-Search-Error/m-p/39682#M619</link>
      <description>&lt;P&gt;There are 2 alternatives to show the current (today's) license usage:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| rest /services/licenser/pools | stats sum(used_bytes) as used | eval used=round(used/1024/1024)
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;or&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=_internal source=*license_usage.log type=Usage earliest=@d | stats sum(b) as bytes | eval mb=round(bytes/1024/1024) | fields mb
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 30 Apr 2012 12:41:38 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Installation/Real-time-License-Monitoring-Search-Error/m-p/39682#M619</guid>
      <dc:creator>ziegfried</dc:creator>
      <dc:date>2012-04-30T12:41:38Z</dc:date>
    </item>
  </channel>
</rss>

