All Apps and Add-ons

license usage - how to tally "i" value to specific indexers?!?! not same as license signature

robf
Path Finder

when i run the follwing search on licnece manager - detail per indexer (slave):

index=_internal source=*license_usage.log | eval GB=b/1024/1024/1024 | timechart span=1d sum(GB) by i useother=false

The values are given for each "i"

Each "i" has a value that looks like: "113E57F6-005D-4CE9-8AA7-97A5F03C2C9A"

How can i convert this to a hostname?

i thought if i look on a SH and look at the Search peers configure it shows a licnece signature that looks like :
"af4d92d37b1c42ad49719d49e0ab0c28 "

Unfortunately these do not tally up at all!

Please help! ( note the LM is running 4.2.4, indexers are 4.3.1)

0 Karma

Kate_Lawrence-G
Contributor

The "i" is actually the slave_name field that I don't believe exists in the _internal index.


It can be found manually if you go the indexer and look under Manager - Licensing for "slave_name". You could make a lookup table from that info if you want to use it for reporting.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...