Monitoring Splunk

Splunk Cloud License Usage

anandhalagarasa
Path Finder

Hi Team,

We are using Splunk Cloud in our environment and we have opted for 200GB of licensing per day. So i want to get notified in such a way if the license is exceeding 80% of the usage then it needs to throw an alert with fields such as Total license quota allocated, the license quota used and what is the percentage of usage along with the balance.

I know we have a Cloud Monitoring Console but still I want to know the query to schedule an alert everyday so that we can proactively fix it.

So kindly help with the query.

Labels (1)
0 Karma

splunkcol
Contributor

`sim_licensing_summary_base`
| `sim_licensing_summary_no_split("")`
| fields - b volume
| where GB > 160

 

splunkcol_0-1619482258619.png

splunkcol_1-1619482323384.png

 

0 Karma

woodcock
Esteemed Legend

If you hover in the lower-right corner of the panel, you will get a list of icons and if you click the magnifying glass you can open the panel search in a new window. Once you have the SPL from the search, you can use it to create an alert. You can also get similar searches from the Meta Woot app and the Alerts for Admins app, which both have searches for assessing license usage.

0 Karma

p_gurav
Champion
0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...