Our Splunk license usage hit 100% we are not sure how this is happening. We check the DMC and it shows two of our servers and a few clients are sending excessive amounts of event. This  was not happening before, turns out someone was messing with the config files on our Splunk server. Would anyone know which config files are causing the issue?  All local input config files were in some way modified.  ... View more

Hello, We are using a Splunk enterprise license currently with 24 gb of license space. Our problem is that are indexing rate is above 1000kb/s and maxing out our license usage. We cannot upgrade our license usage due to policies. Our usage reports were not configured, so we cannot see anything through monitoring report. Is there something possible in the inputs or config files that is causing are machines to send such a large amount of info to splunk?  Any help would be appreciated  thanks ... View more