iis license usage high (Splunk license usage is close to 1GB per hour per server, but actual logs are changing 30MB per hour)

[mattshwink1]

I have tried sourcetype iis and sourcetype ms:iis:auto and both show high license usage for iis.

What can be done to lower the iis license usage?

All my Splunk components are 7.3.0