https://community.splunk.com/t5/Splunk-Search/How-to-search-to-check-license-usage-every-hour-and-send-an/m-p/225838#M66608 <P>You can modify the query here to meet your appropriate percentage requirements <A href="http://gosplunk.com/percentage-of-daily-license-usage/">Daily License Usage in Percent</A>. Then configure an alert to shoot you an email whenever your threshold is reached! Hope that helps.</P> Wed, 16 Sep 2015 13:46:56 GMT hagjos43 2015-09-16T13:46:56Z https://community.splunk.com/t5/Splunk-Search/How-to-search-to-check-license-usage-every-hour-and-send-an/m-p/225837#M66607 <P>How to write a search for License usage to be checked every hour &amp; send an alert email every 10 mins upon reaching 80%.<BR /> product Splunk enterprize 6.2.2 / Windows platform.</P> Wed, 16 Sep 2015 07:00:54 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-to-check-license-usage-every-hour-and-send-an/m-p/225837#M66607 Pranit_Hod 2015-09-16T07:00:54Z https://community.splunk.com/t5/Splunk-Search/How-to-search-to-check-license-usage-every-hour-and-send-an/m-p/225838#M66608 <P>You can modify the query here to meet your appropriate percentage requirements <A href="http://gosplunk.com/percentage-of-daily-license-usage/">Daily License Usage in Percent</A>. Then configure an alert to shoot you an email whenever your threshold is reached! Hope that helps.</P> Wed, 16 Sep 2015 13:46:56 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-to-check-license-usage-every-hour-and-send-an/m-p/225838#M66608 hagjos43 2015-09-16T13:46:56Z https://community.splunk.com/t5/Splunk-Search/How-to-search-to-check-license-usage-every-hour-and-send-an/m-p/225839#M66609 <P>Hi hagjos43 , </P> <P>Thanks for your time &amp; information, I am using same query at present but it did not work as expected.<BR /> It just gives Licences utilization at particular time of the day &amp; do not trigger the query.</P> <P>My requirement here , query to run at every hour of the day &amp; send email notification only if utilization reaches 80% or above.</P> Thu, 17 Sep 2015 03:21:43 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-to-check-license-usage-every-hour-and-send-an/m-p/225839#M66609 Pranit_Hod 2015-09-17T03:21:43Z https://community.splunk.com/t5/Splunk-Search/How-to-search-to-check-license-usage-every-hour-and-send-an/m-p/225840#M66610 <P>You're on Splunk 6.2.2, why not using the DMC pre-build alert called DMC Alert - Total License Usage Near Daily Quota ?</P> Thu, 17 Sep 2015 03:37:53 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-to-check-license-usage-every-hour-and-send-an/m-p/225840#M66610 MuS 2015-09-17T03:37:53Z https://community.splunk.com/t5/Splunk-Search/How-to-search-to-check-license-usage-every-hour-and-send-an/m-p/225841#M66611 <P>Try this (NOTE- I modified the "Where used &gt; 80" part):</P> <P>| rest splunk_server=servername /services/licenser/pools | rename title AS Pool | search [rest splunk_server=servername /services/licenser/groups | search is_active=1 | eval stack_id=stack_ids | fields stack_id] | eval quota=if(isnull(effective_quota),quota,effective_quota) | eval "used"=round(used_bytes/quota*100,2) |where used &gt; 80| fields "used"</P> <P>Once Scheduled have it run every hour in the scheduler and alert based on the "Where used &gt; 80" that SHOULD work for you <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Tue, 29 Sep 2020 07:18:14 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-to-check-license-usage-every-hour-and-send-an/m-p/225841#M66611 hagjos43 2020-09-29T07:18:14Z https://community.splunk.com/t5/Splunk-Search/How-to-search-to-check-license-usage-every-hour-and-send-an/m-p/225842#M66612 <P>Created a saved search with | rest /services/licenser/usage | eval usage = slaves_usage_bytes/quota| fields usage | where usage &gt;0.80</P> Tue, 29 Sep 2020 22:27:51 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-to-check-license-usage-every-hour-and-send-an/m-p/225842#M66612 valiquet 2020-09-29T22:27:51Z