All Apps and Add-ons

Source = Other

Explorer

I am getting a Source of "Other" in my license usage report. How can I find out what that is?

0 Karma

SplunkTrust
SplunkTrust

In all the saved searches, add following to the add (in the timechart or chart command

... where top100



e.g. 
[kBs Indexed in Past 24 Hours by Source]
action.email.sendresults = 0
cron_schedule = No value selected
dispatch.earliest_time = -24h@h
dispatch.latest_time = +0s
displayview = report_builder_display
request.ui_dispatch_view = report_builder_display
search = index="_internal" source="*metrics.log" per_source_thruput | timechart sum(kb) by series where top100
0 Karma