Thanks I was able to get teh resulst with this search:
| rest /services/licenser/pools | where title= "auto_generated_pool_enterprise" | table used_bytes, title | eval GB=used_bytes/1024/1024/1024
BUT now when I set the same as saved search and try to send alert when GB>1 I see the following error:
DEBUG: search context: user="admin", app="tto_search", bs-pathname="/opt/splunk/etc"
INFO: No matching fields exist
WARN: Unable to fetch REST endpoint '/services/licenser/pools' from ''
ANY IDEA ???
... View more