Getting Data In

How would I find License usage by Field?

daniel_althoff8
Loves-to-Learn

How would I find license usage by field?

For example; I want to know which field values within a specific sourcetype account for the greatest volume of events and license usage.

 

Thanks in advance!

Labels (3)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @daniel_althoff8,

It is not possible to carry out a punctual calculation of this kind, but you can see what the license consumption is for a given sourcetype and then see the field you want to analyze what statistical presence it has for the sourcetype and then make a proportion.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

ATTENTION!! We’re MOVING (not really)

Hey, all! In an effort to keep this Slack workspace secure and also to make our new members' experience easy, ...

Splunk Admins: Build a Smarter Stack with These Must-See .conf25 Sessions

  Whether you're running a complex Splunk deployment or just getting your bearings as a new admin, .conf25 ...

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...