Monitoring Splunk

MC Historic License Usage Broken

R15
Communicator

Recently upgraded to 9.2.2 and Historic License Usage panels in the Monitoring Console are now broken. The panels in License Usage - Today still work.

Most answers I found had to do with the license manager not indexing or reading the usage data. But on the license manager the panels all work in Settings » Licensing » License Usage Reporting. 

The suggestion in this post did not apply either: https://community.splunk.com/t5/Splunk-Enterprise/Why-is-Historical-license-usage-page-showing-blank...

 

Labels (1)
0 Karma

nelis249
Explorer

In case anyone ends up on this article. 

Previous version: 9.3
Upgraded to: 10.0

I had this exact same behavior. The above fix did not work for me either. No special server, just a single indexer. I had to modify 3 different macros.

dmc_licensing_summery_no_split
dmc_licensing_summery_pct_no_split
dmc_licensing_summary_maxavg_no_split

On each of these, the queries have: | stats latest(b) AS b by slave, pool, _time |

I had to remove the 'slave' from each of them for it to return properly.

 

 

R15
Communicator

This has followed us on 9.2, 9.3, and 9.4. This didn't work either, but thank you for sharing your solution. I'll try it again once we move to 10.

0 Karma

fsegura
Splunk Employee
Splunk Employee

Hi there, looks like it is a known issue for this version, Splunk dev team is working on it and will be fixed in next releases. 

As a workaround you can try 
1. Open Settings menu and select Advanced Search
2. Next, select Macros
3. Search for dmc_licensing_base_summary. The app must be monitoring console or All. You won't find the macro otherwise.
4. Click on the macro to edit it.
5. In the definition box, change pool="$pool_clause$" to "$pool_clause$" only
6. Save the macro and reload the Historic License Usage dashboard in monitoring console.

R15
Communicator

Thank you for letting me know! Unfortunately the workaround didn't fix it, hopefully the next update will. 

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...