Real-time License Monitoring Search Error

Question

Hello,

I am writing a search to integrate with my dashboard.

Goal:
Display current license usage in megabytes as an integer in a "Single Value" type graph.

Error:
When I run the search, I get "N/A" back.

Current Search:
index=internal source=metrics.log group=per_index_thruput series!= | eval totalMB = kb/1024 | chart sum(totalMB) as total

Any help is appreciated!

Accepted Answer

1	Believe that I may have this resolved. index=_internal source=metrics.log group=per_index_thruput series!=_ \| eval totalMB = kb/1024 \| chart sum(totalMB) as total link answered 30 Apr '12, 05:30 mchandx 51●1●5 accept rate: 75% edited 30 Apr '12, 05:30

Answer 2

0

Here is an example that works. You can modify accordingly.

index=_internal todaysbytesindexed startdaysago=30 | eval MB_Indexed = todaysBytesIndexed/1024/1024 | stats sum(MB_Indexed) by date_month

There are also several references on this post.

link

answered 30 Apr '12, 05:12

sdaniels ♦
4.6k●4●9
accept rate: 34%

I have tried this before as this is what is in the documentation, but it displays the incorrect information.

(30 Apr '12, 05:27) mchandx

Answer 3

0

There are 2 alternatives to show the current (today's) license usage:

| rest /services/licenser/pools | stats sum(used_bytes) as used | eval used=round(used/1024/1024)

or

index=_internal source=*license_usage.log type=Usage earliest=@d | stats sum(b) as bytes | eval mb=round(bytes/1024/1024) | fields mb

link

answered 30 Apr '12, 05:41

ziegfried ♦
10.3k●1●6●18
accept rate: 52%