Hey @nnimbe1,
I don't have an actual search to provide but rather an app that we use in our environment that is immensely helpful when it comes to license usage. We use Meta Woot! a free Splunk app to provide almost exactly the information you need.
It has a dashboard called Meta Woot! License Event Usage that details the host, sourcetype, index, total_events, license_per_event, and total_license usage.
I would recommend check this app out as it does an amazing job of providing the license usage tracking metrics you might need
Andrew
... View more