https://community.splunk.com/t5/Monitoring-Splunk/License-Usage-for-the-last-30-days/m-p/540397#M4790 RolloverSummary is updated once a day. Usually this will happened on midnight. Are your splunk instance running at this time? Thu, 18 Feb 2021 14:57:06 GMT isoutamo 2021-02-18T14:57:06Z https://community.splunk.com/t5/Monitoring-Splunk/License-Usage-for-the-last-30-days/m-p/540394#M4789 <P>When I try to get License Usage for the last 30 days via the Monitoring Console, I only get the last day (the day before the current date). Looking at the events, it appears that RolloverSummary is ONLY stored for a single day. In other words, there are NO events with RolloverSummary for days past the day before the current date.</P><P>Need help fixing this problem.</P> Thu, 18 Feb 2021 14:20:18 GMT https://community.splunk.com/t5/Monitoring-Splunk/License-Usage-for-the-last-30-days/m-p/540394#M4789 karlhenderson 2021-02-18T14:20:18Z https://community.splunk.com/t5/Monitoring-Splunk/License-Usage-for-the-last-30-days/m-p/540397#M4790 RolloverSummary is updated once a day. Usually this will happened on midnight. Are your splunk instance running at this time? Thu, 18 Feb 2021 14:57:06 GMT https://community.splunk.com/t5/Monitoring-Splunk/License-Usage-for-the-last-30-days/m-p/540397#M4790 isoutamo 2021-02-18T14:57:06Z https://community.splunk.com/t5/Monitoring-Splunk/License-Usage-for-the-last-30-days/m-p/540415#M4791 <P>It may be a retention size issue as we were at 99%. I just increased it so we'll see in another day. However, I do have events for 30 days in the _internal index - just not events with RolloverSummery</P> Thu, 18 Feb 2021 16:52:58 GMT https://community.splunk.com/t5/Monitoring-Splunk/License-Usage-for-the-last-30-days/m-p/540415#M4791 karlhenderson 2021-02-18T16:52:58Z