Hi @gcusello  Thank  you very much for your  answer and time,  why do you say that Splunk license costs 5 $/CPU  per day?-->> please assume that It was just a sample data.    Anyway, you can find the license consumption for each sourcetype using  the License Usage report [Settings -- Licensing -- License Usage -- Previous 60 days] using the dropdown "Split by sourcetype". >> somehow this is not working as expected including monitoring console .   Actually i am just looking for the query which can give me daily ingesting data (assume we have 100 + host) cost in $ by each source type  . I ran the below query but it could not give me that result .  ... View more