Splunk Alert: DMC Alert Total License Usage 90% Near Daily Quota

[minhquannguyen7]

My splunk index have a trouble  Total License Usage 90% Near Daily Quota

how to solve it pls ?

[gcusello]

Hi @minhquannguyen7,

it's easy:you have two solutions to this issue:

• buying an additional license,
• reduce some data flows.

In other words, analyze your data identifying the larger data flows and see if you can reduce some of them disabling the related inputs or filtering events, discarding non so interesting events, for more infos see at https://docs.splunk.com/Documentation/SplunkCloud/9.0.2305/Forwarding/Routeandfilterdatad#Filter_eve...).

Ciao.

Giuseppe