Hi @gcusello  i am trying to get data related to usage and billing from splunk, here is query i am using for that   index=_telemetry source=*license_usage_summary.log* | bin _time span=1d | stats sum(b) as TotalBytes by _time | eval GB=round(TotalBytes / (1024 * 1024 * 1024), 2) | timechart span=1d values(GB) as "Daily Indexed GB"   And per my research spulnk has few more such index like _internal and _audit  I just want to know if this is correct approach or not      ... View more

Hi @gcusello , We have many client who uses splunk and we need to get some data from those splunk server I am trying to get a way with SPL to get those data.  Basic Data that we need from those splunk system are  1 )  detailed information about resources, their usage, and associated costs. But i am not sure which index will have this data ? does _telemetry index will have all required data to know how much utilisation has been done day by day ?   I hope this define my requirement clearly.     ... View more

HI @gcusello ,  In splunk we monitor devices or Host and we get logs from them what i need to know how much memory (in GB) has been utilised by those host or log source where does splunk store such data in case of Onpremise instance ? ... View more