The following Splunk search query will return the top five licensing consuming hosts:
1 |
index=_internal source=*license_usage.log type="Usage" | stats sum(b) AS volume by h | eval GB=round(volume/1024/1024/1024,5) | table h GB | sort 5 - GB |