I tried this solutions but then some of my other reports that use the SPLUNK App For Windows Infrastructure stopped showing reults.
[eventtypes]
export = None
# export = system
... View more
I'm pretty new at this but this is what I am using
index=_internal source=*license_usage.log* type=Usage | stats sum(eval(b/1024/1024/1024)) AS GB by h | eval GB=round(GB,2) | rename h as Host | sort GB | addcoltotals label=Total labelfield=Total
... View more