We had an discussion with Splunk Team, we raised this query with them and as per their response, total volume will be divided into both days license count depending upon their indexing volume that has been indexed per day.
In other words, the volume which has been indexed before till 11:59PM today will be counted in today's license, rest of the volume of that file will be get calculated in licnse count of next day.
My query had not any dependency on Licensing server. It has its own defined role.
Thanks Splunk Team, I am posting this answer on behalf of you.
Regards,
Disha
... View more