How to fetch the current utilization from defined search quota for a given user?

[Taruchit]

Hello All,

Using the below code, I get the defined quota limits for each role in Splunk environment: -

 |rest /services/authorization/roles splunk_server=local

I get below fields related to search quota: -

• srchJobsQuota
• rtSrchJobsQuota
• imported_srchJobsQuota
• imported_rtSrchJobsQuota

Is it possible to know the current utilization from each defined search quota for a given user? If yes, I would need your help to fetch the same.

Thank you

[Sid]

were you able to find fix solution for this ?

[Taruchit]

Hi @Sid,

I wasn't able to get the solution yet.

Thank you