All Apps and Add-ons

License usage by OS type

kpavan
Path Finder

Hi,

I want get the license usage by host and specifically for windows OS, I got host usage by below query, but if I add the tag=windows* its not given any output. Please suggest me

index=_internal source=*license_usage.log type=Usage
| stats sum(b) as bytes by h
| eval MB = round(bytes/1024/1024,1)
| fields h MB
| rename h as host

Thanks

0 Karma

somesoni2
SplunkTrust
SplunkTrust

Use following query to get Host -OS mapping

index=_internal (source=*metrics.log) |dedup os,hostname | rename hostname as host| table os,host

Save this a lookup table file (say host_os.csv), then use it to get the license usage by OS

index=_internal source=*license_usage.log type=Usage | stats sum(b) as bytes by h | eval MB = round(bytes/1024/1024,1) | fields h MB | lookup host_os.csv host as h | stats sum(bytes) as bytes by os
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...