Installation

How to check license usage directly on license server in Splunk cloud?

lbogle
Contributor

Hello,
I am looking to try and find a way to look at Splunk license usage in our Splunk cloud environment directly on the license server. I do not have HTTPS/Web access to the Splunk cloud licensing server and need to find this information out using a query or perhaps using |rest (if possible). Anyone know how I could do this? I think I am able to find license usage by querying the indexers directly but it's very slow.
Thanks for any assistance!

Labels (1)
0 Karma
1 Solution

yannK
Splunk Employee
Splunk Employee

There is no direct access to the license master in cloud (cluster). So you can only search on the license_usage.log forwarded to the indexers.

Ps: on splunkcloud single instance ( self service) there is no license master. but you do not have the capability to query the license rest. so tje solution is also to look at the logs.

View solution in original post

timpacl
Path Finder

Splunk Cloud includes a monitoring Console app that shows you your daily indexing volume over the last 30 days.

0 Karma

yannK
Splunk Employee
Splunk Employee

There is no direct access to the license master in cloud (cluster). So you can only search on the license_usage.log forwarded to the indexers.

Ps: on splunkcloud single instance ( self service) there is no license master. but you do not have the capability to query the license rest. so tje solution is also to look at the logs.

lbogle
Contributor

Thanks Yann. Appreciate it.
I'm new to Splunk's Cloud nuance.

0 Karma

yannK
Splunk Employee
Splunk Employee

There is an app provide to add visibility (look for splunkcloud_status)

0 Karma

lbogle
Contributor

I'm not seeing the splunkcloud_status app under our cloud instance. I checked w/ our team lead and he had not seen this app in our cloud instance. Do you recommend I open a support case to get that enabled?

0 Karma

yannK
Splunk Employee
Splunk Employee

yes, please have your authorized contact open a support case.
This app is usually missing on very old deployments, or on large deployments with search-head clustering.

0 Karma

saurabh_tek
Communicator

Any way internally in Splunk Cloud to check that licensing has been upgraded other than opening support case with Splunk ?

0 Karma

yannK
Splunk Employee
Splunk Employee

Only on single instance, looking at the license pool size.
for cluster, ask your sales contact.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...