We are trying to use the Splunk license app and it is not working. Is it possible that Splunk does not count its internal logs against the license?
No they aren't.
You can check this reporting your license usage divided by index: There isn't _internal
View solution in original post
if you're satisfied of the answer, please, accept the answer.
Is it a community app showing a chart including internal logs?
Internal logs do not count against your license.
Thank you all for taking the time to help me out here... thanks!