Troubleshoot the license usage report view

No results in Previous 30 Days tab

If the panel is empty, the Splunk Enterprise instance acting as the license manager can not find any licensing events. These events are recorded in the license_usage.log file, and are ingested and stored in the internal index. Here are some scenarios that might cause the issue:

• The license manager instance is not configured to search the indexers or cluster peers. For instructions on configuring the license manager to search indexers or peer nodes, see Add search peers to the search head.
• The license manager instance stopped ingesting its local Splunk Enterprise log files. Use the btool command to check the default Splunk Enterprise log monitor [monitor://$SPLUNK_HOME/var/log/splunk] and verify it is enabled. For examples of btool use, see Use btool to troubleshoot configurations.

A gap might appear in the data if the license manager was unavailable at midnight, when license reconciliation occurs.

Single-source type license limitations

An instance that has both a single-source type license and an Enterprise license does not always show accurate information.