Splunk Cloud License Usage

[anandhalagarasa]

Hi Team,

We are using Splunk Cloud in our environment and we have opted for 200GB of licensing per day. So i want to get notified in such a way if the license is exceeding 80% of the usage then it needs to throw an alert with fields such as Total license quota allocated, the license quota used and what is the percentage of usage along with the balance.

I know we have a Cloud Monitoring Console but still I want to know the query to schedule an alert everyday so that we can proactively fix it.

So kindly help with the query.

[splunkcol]

`sim_licensing_summary_base`
| `sim_licensing_summary_no_split("")`
| fields - b volume
| where GB > 160

[woodcock]

If you hover in the lower-right corner of the panel, you will get a list of icons and if you click the magnifying glass you can open the panel search in a new window. Once you have the SPL from the search, you can use it to create an alert. You can also get similar searches from the Meta Woot app and the Alerts for Admins app, which both have searches for assessing license usage.

[p_gurav]

This may helpful:

https://docs.splunk.com/Documentation/SplunkCloud/7.2.6/User/DMCoverview#Check_your_total_data_reten...