Alerting

License usage previous 30 days doesn't work

ddarmand
Communicator

Hello,

i have an alert because of the limitation of 500 mb per day,
i want to know which host is spamming me to shut it but the licence previous 30 days doesn't work,
but licence usage today is working fine..

The graph is blank...

Can you help me ?

1 Solution

jlaw
Splunk Employee
Splunk Employee

jlaw
Splunk Employee
Splunk Employee

lukejadamec
Super Champion

What do you get when you run this for the past 30 days?
index=_internal source=*metrics.log group=per_index_thruput series!=_* | eval totalGB = (kb/1024)/1024 | timechart span=1d sum(totalGB)

0 Karma

lukejadamec
Super Champion

Which app is generating the chart?

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...