Getting Data In

How would I find License usage by Field?

daniel_althoff8
Loves-to-Learn

How would I find license usage by field?

For example; I want to know which field values within a specific sourcetype account for the greatest volume of events and license usage.

 

Thanks in advance!

Labels (3)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @daniel_althoff8,

It is not possible to carry out a punctual calculation of this kind, but you can see what the license consumption is for a given sourcetype and then see the field you want to analyze what statistical presence it has for the sourcetype and then make a proportion.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...