You can monitor license usage with the Deployment Monitor App. The license usage page shows a wide range of historical information. There's also a license report page page that provides details on daily license usage over a 60 day period.
License usage page
If you exceed your licensed daily volume on any one calendar day, you will get a violation warning. The message persists for 14 days. If you have 5 or more warnings on an Enterprise license or 3 warnings on a Free license in a rolling 30-day period, you are in violation of your license. Splunk is software for collecting and analyzing big data. This program provides you with a deep insight into the process of growing your business by analyzing and evaluating the Big Data generated in your company’s technological infrastructure, security systems and business applications. Splunk monitors everything from user clicks to security transactions and networking activities. Splunk Data-to-Everything pricing offers predictable and flexible pricing options for Splunk products. In addition to our traditional ingest pricing model, we offer three additional options: Infrastructure-based pricing, Predictive Pricing and Rapid Adoption packages.
The license usage page in the deployment monitor contains two charts: one that shows the cumulative MB of data per day by source type, and a histogram that shows MB of data received across selectable criteria, including source type, host, source, indexer, forwarder, and license pool.
Further down the page, there's detailed information on usage statistics, with separate listings for several criteria, including sourcetype, host, source, indexer, forwarder, and license pool.
License report page
Splunk Developer License
The license report page provides information on daily license usage. You can use this information to help estimate your license needs.
Splunk Free License Limit
At the top of the page, there's a usage summary that provides peak and average usage statistics. Next, there's a chart that shows daily volume over the last four weeks. Finally, there's detailed information on daily usage over the last 60 days, ordered by indexer or license pool.