How would I find License usage by Field?

[daniel_althoff8]

How would I find license usage by field?

For example; I want to know which field values within a specific sourcetype account for the greatest volume of events and license usage.

Thanks in advance!

[gcusello]

Hi @daniel_althoff8,

It is not possible to carry out a punctual calculation of this kind, but you can see what the license consumption is for a given sourcetype and then see the field you want to analyze what statistical presence it has for the sourcetype and then make a proportion.

Ciao.

Giuseppe