Hello,
i have an alert because of the limitation of 500 mb per day,
i want to know which host is spamming me to shut it but the licence previous 30 days doesn't work,
but licence usage today is working fine..
The graph is blank...
Can you help me ?
What do you get when you run this for the past 30 days?
index=_internal source=*metrics.log group=per_index_thruput series!=_* | eval totalGB = (kb/1024)/1024 | timechart span=1d sum(totalGB)
Which app is generating the chart?