How to remotely monitor Splunk license violations and warnings?

[rubeniturrieta]

I to everyone, i have a question for you:

I need to remotely monitor license violations and warnings with external tools. Do you know how to do something like this?

Any help is welcome.

Regards

[scherbanepam]

It is also possible to use REST for remotely watch the data

[stephane_cyrill · Accepted solution]

Hi rubeniturrieta,
1- If you are using splunk 6.2..in SETTINGS >DEPLOYMENT MONITORING CONSOLE, if your deployment in well configure,you have varieties of monitoring dashbords there that shows you almost everything.

2- you can set up an alert base on the quota indexed volume for on or many host, So that if there reach somthing like 80% of license volume,the alert should be triggered. You can even send a warning email when the alert start.

3- Let me add this:
in your deployment you can make use of license pool,for example, if you have many units, you allocate a sub license pool per unit. doing so, if a unit exceed thier quota or violate thier license, they will be stop and they will no consume other units license.

docs.splunk.com/Documentation/Splunk/6.2.2/Admin/Platformalerts

[rubeniturrieta]

It worked!, thanks you!