All Apps and Add-ons

license usage - how to tally "i" value to specific indexers?!?! not same as license signature

robf
Path Finder

when i run the follwing search on licnece manager - detail per indexer (slave):

index=_internal source=*license_usage.log | eval GB=b/1024/1024/1024 | timechart span=1d sum(GB) by i useother=false

The values are given for each "i"

Each "i" has a value that looks like: "113E57F6-005D-4CE9-8AA7-97A5F03C2C9A"

How can i convert this to a hostname?

i thought if i look on a SH and look at the Search peers configure it shows a licnece signature that looks like :
"af4d92d37b1c42ad49719d49e0ab0c28 "

Unfortunately these do not tally up at all!

Please help! ( note the LM is running 4.2.4, indexers are 4.3.1)

0 Karma

Kate_Lawrence-G
Contributor

The "i" is actually the slave_name field that I don't believe exists in the _internal index.


It can be found manually if you go the indexer and look under Manager - Licensing for "slave_name". You could make a lookup table from that info if you want to use it for reporting.

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...