Hello,
I am looking to try and find a way to look at Splunk license usage in our Splunk cloud environment directly on the license server. I do not have HTTPS/Web access to the Splunk cloud licensing server and need to find this information out using a query or perhaps using |rest (if possible). Anyone know how I could do this? I think I am able to find license usage by querying the indexers directly but it's very slow.
Thanks for any assistance!
There is no direct access to the license master in cloud (cluster). So you can only search on the license_usage.log forwarded to the indexers.
Ps: on splunkcloud single instance ( self service) there is no license master. but you do not have the capability to query the license rest. so tje solution is also to look at the logs.
Splunk Cloud includes a monitoring Console app that shows you your daily indexing volume over the last 30 days.
There is no direct access to the license master in cloud (cluster). So you can only search on the license_usage.log forwarded to the indexers.
Ps: on splunkcloud single instance ( self service) there is no license master. but you do not have the capability to query the license rest. so tje solution is also to look at the logs.
Thanks Yann. Appreciate it.
I'm new to Splunk's Cloud nuance.
There is an app provide to add visibility (look for splunkcloud_status)
I'm not seeing the splunkcloud_status app under our cloud instance. I checked w/ our team lead and he had not seen this app in our cloud instance. Do you recommend I open a support case to get that enabled?
yes, please have your authorized contact open a support case.
This app is usually missing on very old deployments, or on large deployments with search-head clustering.
Any way internally in Splunk Cloud to check that licensing has been upgraded other than opening support case with Splunk ?
Only on single instance, looking at the license pool size.
for cluster, ask your sales contact.