this default alert does not work,
| rest splunk_server_group=dmc_group_license_master /services/licenser/pools
this does not even return any results.
Anyone having ideas?
@n3wbi3- Have you configured DMC (Monitoring Console) roles for all the servers properly?
https://docs.splunk.com/Documentation/Splunk/9.2.1/DMC/Configureindistributedmode
Try running:
| rest splunk_server_group=* /services/licenser/pools
I hope this helps!!!