How is the peak license-usage figure in the License Manager page handled?

[mctester]

Hello,

In regards to licenses, can you better explain peak license usage: does the number I see under manager > License> peak usage indicate the peak over the life of the server, or does it reset every 30 days for example? When does it reset?

Thanks!

[Mick · Accepted solution]

Every time Splunk adds up it indexing total for the previous 24 hours, it will compare that total with the peak it has previously recorded. If the new figure is higher, the existing record is replaced. If not, the record remains the same. It should never be reset, unless the indexes are cleaned.