Licensing best practices, need to trim it. I have Splunk Enterprise, a SOC team that uses ES. If you have taken measures that worked for you please share some highlights. Thank u
