The following Splunk search query will return the top five licensing consuming hosts:

index=_internal source=*license_usage.log type="Usage" | stats sum(b) AS volume by h  | eval  GB=round(volume/1024/1024/1024,5)  | table h GB  | sort 5 - GB