Applicability
Splunk Enterprise
Description
The "License Usage - Previous 30 Days" is one of the dashboards built into Splunk Monitoring Console. To access it, go to Settings > Monitoring Console > Indexing > License Usage > License Usage - Previous 30 Days.
The charts in this dashboard are powered by background searches that look for data in
_internal index with the following characteristics:
source=*license_usage.log* type="RolloverSummary"But please note that as per documentation:
About the Splunk Enterprise license usage report viewIf the license master is down during the time period that represents its local midnight, it will not generate a RolloverSummary event for that day, and you will not see that day's data in these panels.That is, the "RolloverSummary" events are created in the license_usage.log every midnight local server time.
If Splunk is down at that time, these events will be missed. Once Splunk is up again, future "RolloverSummary" events will be generated as usual, but the missed ones will manifest in gap in the "License Usage - Previous 30 Days" dashboard.
Revision History
| Revision |
Publish Date |
Comments |
1.0 |
29-Sep-2026
|
Initial Release |