Use the Ingest Processor dashboard
The Ingest Processor dashboard provides a central location for monitoring your Ingest Processor license usage. You can use this dashboard to view details of your Ingest Processor license entitlement, track daily license usage, and identify trends in license usage that can help you use your license entitlement efficiently.
What is the Ingest Processor?
Ingest Processor is a data processing capability that works within Splunk Cloud Platform. You can use Ingest Processor to configure data flows, control data format, apply transformation rules prior to indexing, and route to destinations. For more information on Ingest Processor, see About Ingest Processor.
About Ingest Processor license tiers
Ingest Processor offers two license tiers: Essential and Premier.
The Essential tier is a free tier included with your Splunk Cloud Platform subscription that accommodates a maximum daily processing volume of 500 GB/day of incoming data. The Premier tier is a paid option that supports daily processing volumes over 500 GB/day of incoming data.
For more information on Ingest Processor licenses and to upgrade your license tier, contact your Splunk account representative.
Access the Ingest Processor dashboard
To view the Ingest Processor dashboard, you must have an active Ingest Processor license.
To access the CMC Ingest Processor dashboard:
- In Splunk Web, select Cloud Monitoring Console.
- Select License Usage and then Ingest Processor.
Review Ingest Processor dashboard panels
Ingest Processor dashboard panels show information about your Ingest Processor license usage. You can use these panels to gain insight into your organization's usage of your Ingest Processor license entitlement and to identify trends that can help you optimize license usage and avoid overages.
The dashboard includes the following panels:
Panel | Description |
---|---|
Current license entitlement |
Shows the Daily Processing Volume license limit, the license tier, and the valid dates for your license. |
License utilization today |
Shows the percent license usage thus far for the current day (UTC). Select More options (3 dots) and then refresh to update the value for the current time. Select the tooltip to view additional information about Ingest Processor license utilization, including license usage threshold definitions, license tier upgrade details, and CMC alerts that you can activate to help you manage license usage. Optimal license usage is less than 80%. Usage greater than 80% is considered elevated, and usage greater than 90% is considered critical and means you are approaching your license limit. Exceeding your daily license limit can result in additional charges. |
Events processed today |
Shows the number of events processed thus far for the current day (UTC). Select More options (three dots) and then refresh to update the value for the current time. There is a correlation between event complexity and data consumption. Large numbers of events can indicate inefficient use of your Ingest Processor license entitlement. |
Ingest Processor daily license usage |
Shows your daily license usage thus far for the current day, the last 7 days, or the last 30 days (UTC). View daily license usage by data volume (GB), percent usage of your total license entitlement or by the number of events processed. Select More options (three dots) and then refresh to update the value for the current time. Use this panel to analyze license usage over time and identify trends that can help you manage users and ensure that license usage stays within your set license limits. |
Configure alerts for ingest processor license usage
The CMC Alerts dashboard provides preconfigured alerts that you can enable to stay informed when Ingest Processor license usage exceeds specified thresholds. You can modify the default settings for preconfigured alerts in the Alerts dashboard.
CMC provides the following alerts for Ingest Processor license usage:
Alerts | Description |
---|---|
CMC Alert - Ingest Processor daily processed volume is approaching license limit |
Triggers when Ingest Processor daily license usage exceeds 80% of the set license limit. 80% is a default trigger condition, which you can modify under Alert settings. You can also modify the cron schedule for the alert. |
CMC Alert - Ingest Processor weekly processed volume exceeds license limit |
Triggers when Ingest Processor weekly license usage exceeds 100% of the set license limit. 100% is a default trigger condition, which you can modify under Alert settings. You can also modify the cron schedule for the alert. |
CMC alerts are disabled by default.
For more information on configuring alerts, see Use the Alerts dashboard.
Review the Splunk Cloud Platform health report | Manage your Splunk Cloud Platform capacity |
This documentation applies to the following versions of Splunk Cloud Platform™: 8.2.2112, 8.2.2201, 8.2.2202, 8.2.2203, 9.0.2205, 9.0.2208, 9.0.2209, 9.0.2303, 9.0.2305, 9.1.2308, 9.1.2312, 9.2.2403, 9.2.2406, 9.3.2408, 9.3.2411 (latest FedRAMP release)
Feedback submitted, thanks!