Hi rubeniturrieta,
1- If you are using splunk 6.2..in SETTINGS >DEPLOYMENT MONITORING CONSOLE, if your deployment in well configure,you have varieties of monitoring dashbords there that shows you almost everything.
2- you can set up an alert base on the quota indexed volume for on or many host, So that if there reach somthing like 80% of license volume,the alert should be triggered. You can even send a warning email when the alert start.
3- Let me add this:
in your deployment you can make use of license pool,for example, if you have many units, you allocate a sub license pool per unit. doing so, if a unit exceed thier quota or violate thier license, they will be stop and they will no consume other units license.
docs.splunk.com/Documentation/Splunk/6.2.2/Admin/Platformalerts
It is also possible to use REST for remotely watch the data
Hi rubeniturrieta,
1- If you are using splunk 6.2..in SETTINGS >DEPLOYMENT MONITORING CONSOLE, if your deployment in well configure,you have varieties of monitoring dashbords there that shows you almost everything.
2- you can set up an alert base on the quota indexed volume for on or many host, So that if there reach somthing like 80% of license volume,the alert should be triggered. You can even send a warning email when the alert start.
3- Let me add this:
in your deployment you can make use of license pool,for example, if you have many units, you allocate a sub license pool per unit. doing so, if a unit exceed thier quota or violate thier license, they will be stop and they will no consume other units license.
docs.splunk.com/Documentation/Splunk/6.2.2/Admin/Platformalerts
It worked!, thanks you!