Hello Good people, I am pretty new to the splunk community. I have inherited a splunk enterprise application. The Splunk server on weekdays is being forwarded around 45GB of data, daily, mon-fri. On the weekends it increases to 80GB per day, which seems to be odd since no one is on the network on the weekends. Where would I begin to look at configuration files in order to decrease the amount of data being sent? Also, our license limit is only 15GB. ... View more