Dashboard - Rolled Buckets By Index - source path for Linux

[ChrisBell04]

On this dashboard, the sub-panel "License usage for index X" has the source hardcoded for Linux. Probably a good idea to abstract this into another macro? splunkadmins_license_usage_source = *license_usage.log

index=_internal `licensemasterhost` source="/opt/splunk/var/log/splunk/license_usage.log" idx=X
| bin _time span=24h
| stats sum(b) AS totalB by idx, _time
| eval totalB=totalB/1024/1024/1024
| chart avg(totalB) AS totalGB by _time, idx

[gjanders · Accepted solution]

Fixed in testing version found here
Sorry must have missed that one...

[ChrisBell04]

Thanks for the quick fix!

[gjanders]

Thanks for letting me know, I will try to release it on SplunkBase in the next few weeks.

I try to add at least a few changes between releases 🙂