All Apps and Add-ons

how to get license usage in splunk by index by REST

nithinrakesh
Engager

how to get license usage in splunk by index by REST. I cannot find logs in index=_internal

0 Karma

harsmarvania57
Ultra Champion

Hi @nithinrakesh,

You can search splunk license usage by query index=_internal source=*license_usage.log* and do calculation based on your requirement.

If you want to use REST then you can use | rest /services/licenser/pools, this REST will give you today's license usage for different pools.

I hope this helps.

Thanks,
Harshil

nithinrakesh
Engager

HI @Harshil I got it through pools but I need group by index

0 Karma

ddrillic
Ultra Champion

This is gorgeous - | rest /services/licenser/pools. But how can we break it by index?

I have a similar thing when doing it from the UI at - Why do we see a discrepancy between the daily licensing page and the Usage report for the past 30 da...

0 Karma
Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 3)

Welcome back to Splunk Classroom Chronicles, our ongoing blog series that pulls back the curtain on Splunk ...

Operationalizing TDIR: Building a More Resilient, Scalable SOC

Optimizing SOC workflows with a unified, risk-based approach to Threat Detection, Investigation, and Response ...

Almost Too Eventful Assurance: Part 1

Modern IT and Network teams still struggle with too many alerts and isolating issues before they are notified. ...