The results for the searches on the License Usage Dashboard (in the SUM app) are off. They all include a large spike at the beginning of the day because they are not specifying "type=Usage" in the searches, which makes them include rollover information. Setting "type=Usage" on these searches sets the numbers straight.
Hi jkleensang! Thank you for reporting this. I've applied the fix and repackaged SUM under v1.3.1 on Splunkbase.
You may find the updated version here: https://splunkbase.splunk.com/app/2678/#/overview
Hi jkleensang! Thank you for reporting this. I've applied the fix and repackaged SUM under v1.3.1 on Splunkbase.
You may find the updated version here: https://splunkbase.splunk.com/app/2678/#/overview