Splunk Search

License Usage by Each Indexer

vishaltaneja070
Motivator

License Usage by Each Indexer : Need to find license usage by each indexer.

Labels (2)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @vishaltaneja070,

see in [Settings -- Licensing -- Previous 30 days] and in the "Split by" dropdown, choose "Indexer".

You can reach the same result using the Splunk Monitoring Console: [Settings -- Monitoring Console -- Indexing -- License Usage -- Previous 30 days ] and in the "Split by" dropdown, choose "By Indexer"

Ciao.

Giuseppe

View solution in original post

_gkollias
Builder

You could also run the following search:

index=_internal sourcetype=splunkd component=LicenseUsage type=Usage 
| stats sum(eval(round(b/1024/1024/1024,2))) as indexed_gb by splunk_server

Thanks!

Greg

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @vishaltaneja070,

see in [Settings -- Licensing -- Previous 30 days] and in the "Split by" dropdown, choose "Indexer".

You can reach the same result using the Splunk Monitoring Console: [Settings -- Monitoring Console -- Indexing -- License Usage -- Previous 30 days ] and in the "Split by" dropdown, choose "By Indexer"

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Harnessing Splunk’s Federated Search for Amazon S3

Managing your data effectively often means balancing performance, costs, and compliance. Splunk’s Federated ...

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...