Security

Daily License Usage by Host

ijaffry
Engager

I want to see my daily usage but have it list by host instead of date.

Tags (1)

lguinn2
Legend

Try

index=_internal source=*license_usage.log type=Usage 
| stats sum(b) as bytes by h 
| eval MB = round(bytes/1024/1024,1)
| fields h MB
| rename h as host

If you take a look at the license_usage.log, you will see lots of different ways that you can break down this report...

splunker12er
Motivator

This query would show the results for total (When we selected the time as 'All Time')

Select the time range accordingly to the splunk local time on the license server to get the daily license usage per host

0 Karma

landen99
Motivator

What does it mean with this message (searching Today)?:

index=_internal source=*license_usage.log | head 99

Events (1)
08-24-2015 09:17:26.423 -0700 INFO LicenseUsage - type=Message - License usage logging not available for slave licensing instances, please see license_usage.log on license master=https://***:8089 for usage breakdown

0 Karma

somesoni2
Revered Legend

The license usage logs are available in License Master node. If your search head doesn't contain license OR in other words, you've a separate license master node (which is definitely the case per the error that you receive), The license usage logs is not available in the Search Head directly. What you can do is forward the logs from your license master node (mentioned in your log), to forwarder the data to Indexers, so that Search Head can access it.

0 Karma
Get Updates on the Splunk Community!

Exporting Splunk Apps

Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...

Cisco Use Cases, ITSI Best Practices, and More New Articles from Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...