Security

Daily License Usage by Host

ijaffry
Engager

I want to see my daily usage but have it list by host instead of date.

Tags (1)

lguinn2
Legend

Try

index=_internal source=*license_usage.log type=Usage 
| stats sum(b) as bytes by h 
| eval MB = round(bytes/1024/1024,1)
| fields h MB
| rename h as host

If you take a look at the license_usage.log, you will see lots of different ways that you can break down this report...

splunker12er
Motivator

This query would show the results for total (When we selected the time as 'All Time')

Select the time range accordingly to the splunk local time on the license server to get the daily license usage per host

0 Karma

landen99
Motivator

What does it mean with this message (searching Today)?:

index=_internal source=*license_usage.log | head 99

Events (1)
08-24-2015 09:17:26.423 -0700 INFO LicenseUsage - type=Message - License usage logging not available for slave licensing instances, please see license_usage.log on license master=https://***:8089 for usage breakdown

0 Karma

somesoni2
Revered Legend

The license usage logs are available in License Master node. If your search head doesn't contain license OR in other words, you've a separate license master node (which is definitely the case per the error that you receive), The license usage logs is not available in the Search Head directly. What you can do is forward the logs from your license master node (mentioned in your log), to forwarder the data to Indexers, so that Search Head can access it.

0 Karma
Get Updates on the Splunk Community!

New in Observability - Improvements to Custom Metrics SLOs, Log Observer Connect & ...

The latest enhancements to the Splunk observability portfolio deliver improved SLO management accuracy, better ...

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

Register Join this Tech Talk to learn how unique features like Service Centric Views, Tag Spotlight, and ...