License manager not reporting past 30 days (6.6.4)

[halbeisendv]

The License Manager server does not report past 30 days. The DMC, on a different server, reports satisfactorily and when I grab the SPL from the LM and run it on the Search Head Cluster the results are as expected. We have already ensured followed the guidance in https://docs.splunk.com/Documentation/Splunk/6.6.4/Admin/LicenseUsageReportViewexamples. Help/guidance is appreciated.

And, we verified are settings with the boundaries of these recommendations

[Vijeta]

@halbeisendv Have you tried below query, you can run it on search head.

index=_internal source=*license_usage.log type=Usage host=<your license master>

[jkat54]

Does the license master have any search peers? Pretend its trying to be a search head and follow this guidance:

https://docs.splunk.com/Documentation/Splunk/7.3.0/DistSearch/Configuredistributedsearch

[halbeisendv]

Thank you for your response, but that was not the resolution to the problem we are experiencing.

[mdsnmss]

The links copied in are more related to the fact that _internal and thus license_usage.log is only retained for 30 days and then it's buckets freeze by default. So that would be why you can't retrieve license info for days <30 days out. Can you run any searches from the license master?

[halbeisendv]

This problem is that the License Manager Server will not display license utilization for the past 30 days. Yes, I can run searches from the License Manager. Thank you for your response and assistance.