HI @sdintino [Splunk],
you could also plan to schedule the following search to be execute every night at 23.59:
| rest splunk_server=local /services/licenser/pools
| stats sum(used_bytes) as used
| eval usedGB=round(used/1024/1024/1024,3)
| summary index=license_consuption
and save it in a summary index with a retention of 60 days.
Ciao.
Giuseppe
... View more
