I am getting a Source of "Other" in my license usage report. How can I find out what that is?
In all the saved searches, add following to the add (in the timechart or chart command
... where top100
e.g.
[kBs Indexed in Past 24 Hours by Source]
action.email.sendresults = 0
cron_schedule = No value selected
dispatch.earliest_time = -24h@h
dispatch.latest_time = +0s
displayview = report_builder_display
request.ui_dispatch_view = report_builder_display
search = index="_internal" source="*metrics.log" per_source_thruput | timechart sum(kb) by series where top100