Deployment Architecture

Indexed data till date with no access on license master.


Hi All,

I'm stuck in a situation where i believe i would need your help.

I need to get total indexed data per index till date. My splunk instance(indexer+SH) is a salve to license master pool located in some other country. I don't have access on license_usage.log file in cluster master as forwarding data from that country to our country is against Government Rules.

So, There's no outputs.conf file configured on license master and we cannot do it either.

Is there a way to know total data indexed per index till date.

Please help.

I'll be thankful to you!

0 Karma

Path Finder

Do you have a monitoring console?
Do you have gui access to the license master?
Is your searchhead and license master are search peers?

You can try to use rest commands for example:
| rest /services/licenser/pools

Or you can check this reference

0 Karma


Hi @jarizeloyola,

Yes we do have GUI monitoring console.
We don't have any access to GUI of license master.

In GUI monitoring console, when we see disk usage - it shows 409 GB around and when we see size of indexes for today 390GB.

and there's no change in config files ans still we can see that disk usage is increasing day by day 1 to 2 GB while size of indexes remains same almost. Could you help here and let me know what would be issue?

0 Karma
Get Updates on the Splunk Community!

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...

Get ready to show some Splunk Certification swagger at .conf24!

Dive into the deep end of data by earning a Splunk Certification at .conf24. We're enticing you again this ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Now On-Demand Join us to learn more about how you can leverage Service Level Objectives (SLOs) and the new ...