How to Get License Count by Cluster Peer

[whitefang1726]

HI Splunk Answers, 

Is there a way to get license count by Cluster Peer? Example if I have 3 splunk cluster, I need to get the license by cluster (location) and by index (sourcetype if possible). Internal logs doesn't include the indexer based on host (h). I'm thinking of different SPL query but no idea where I can get it. Need your help. thanks!

07-16-2024 21:14:52.451 -0500 INFO LicenseUsage - type=Usage s="test:source::/opt/splunk/var/log/test_2024-07-16.log" st="test-st" h=hosttest o="" idx="testidx" i="sadsadasdasdadasdasdasdasdasda" pool="auto_generated_pool_enterprise" b=503 poolsz=1234567891012

[whitefang1726]

@payl_chdhry this one works. thanks! any idea what rest url to get all the guids? I saw a majority of the guids but still missing a couple of there hostnames. 

| rest /services/server/info
| rest splunk_server_group=* /services/cluster/master/peers
| rest splunk_server=* /services/search/distributed/peers

[payl_chdhry · Accepted solution]

I can see "i" which is the guid for indexer. Can check if that works. You would have to first manually note down the guid for each indexer and map which cluster it belongs to.

[payl_chdhry]

You would need to create a pool and assing indexers based on pool so get it by cluster.

[whitefang1726]

Thanks for the response. However, I need the license usage per cluster. That's provides the total license today. 

[inventsekar]

Hi @whitefang1726 

may i know if you have checked the default license dashboards at the DMC (indexing---> License Usage --- > today or history)

Best Regards

Sekar