Splunk Cloud Platform

Splunk Cloud Platform Admin Manual

Use the Ingest Processor dashboard

The Ingest Processor dashboard provides a central location for monitoring your Ingest Processor license usage. You can use this dashboard to view details of your Ingest Processor license entitlement, track daily license usage, and identify trends in license usage that can help you use your license entitlement efficiently.

What is the Ingest Processor?

Ingest Processor is a data processing capability that works within Splunk Cloud Platform. You can use Ingest Processor to configure data flows, control data format, apply transformation rules prior to indexing, and route to destinations. For more information on Ingest Processor, see About Ingest Processor.

About Ingest Processor license tiers

Ingest Processor offers two license tiers: Essential and Premier.

The Essential tier is a free tier included with your Splunk Cloud Platform subscription that accommodates a maximum daily processing volume of 500 GB/day of incoming data. The Premier tier is a paid option that supports daily processing volumes over 500 GB/day of incoming data.

For more information on Ingest Processor licenses and to upgrade your license tier, contact your Splunk account representative.

Access the Ingest Processor dashboard

To view the Ingest Processor dashboard, you must have an active Ingest Processor license.

To access the CMC Ingest Processor dashboard:

  1. In Splunk Web, select Cloud Monitoring Console.
  2. Select License Usage and then Ingest Processor.

Review Ingest Processor dashboard panels

Ingest Processor dashboard panels show information about your Ingest Processor license usage. You can use these panels to gain insight into your organization's usage of your Ingest Processor license entitlement and to identify trends that can help you optimize license usage and avoid overages.

The dashboard includes the following panels:

Panel Description
Current license entitlement

Shows the Daily Processing Volume license limit, the license tier, and the valid dates for your license.

License utilization today

Shows the percent license usage thus far for the current day (UTC). Select More options (3 dots) and then refresh to update the value for the current time.

Select the tooltip to view additional information about Ingest Processor license utilization, including license usage threshold definitions, license tier upgrade details, and CMC alerts that you can activate to help you manage license usage.

Optimal license usage is less than 80%. Usage greater than 80% is considered elevated, and usage greater than 90% is considered critical and means you are approaching your license limit. Exceeding your daily license limit can result in additional charges.

Events processed today

Shows the number of events processed thus far for the current day (UTC). Select More options (three dots) and then refresh to update the value for the current time.

There is a correlation between event complexity and data consumption. Large numbers of events can indicate inefficient use of your Ingest Processor license entitlement.

Ingest Processor daily license usage

Shows your daily license usage thus far for the current day, the last 7 days, or the last 30 days (UTC). View daily license usage by data volume (GB), percent usage of your total license entitlement or by the number of events processed. Select More options (three dots) and then refresh to update the value for the current time.

Use this panel to analyze license usage over time and identify trends that can help you manage users and ensure that license usage stays within your set license limits.

Configure alerts for ingest processor license usage

The CMC Alerts dashboard provides preconfigured alerts that you can enable to stay informed when Ingest Processor license usage exceeds specified thresholds. You can modify the default settings for preconfigured alerts in the Alerts dashboard.

CMC provides the following alerts for Ingest Processor license usage:

Alerts Description
CMC Alert - Ingest Processor daily processed volume is approaching license limit

Triggers when Ingest Processor daily license usage exceeds 80% of the set license limit. 80% is a default trigger condition, which you can modify under Alert settings. You can also modify the cron schedule for the alert.

CMC Alert - Ingest Processor weekly processed volume exceeds license limit

Triggers when Ingest Processor weekly license usage exceeds 100% of the set license limit. 100% is a default trigger condition, which you can modify under Alert settings. You can also modify the cron schedule for the alert.

CMC alerts are disabled by default.

For more information on configuring alerts, see Use the Alerts dashboard.

Last modified on 18 June, 2025
Monitor your deployment with the splunkd health report   How Splunk monitors Splunk Cloud Platform

This documentation applies to the following versions of Splunk Cloud Platform: 8.2.2112, 8.2.2201, 8.2.2202, 8.2.2203, 9.0.2205, 9.0.2208, 9.0.2209, 9.0.2303, 9.0.2305, 9.1.2308, 9.1.2312, 9.2.2403, 9.2.2406, 9.3.2408, 9.3.2411 (latest FedRAMP release)


Please expect delayed responses to documentation feedback while the team migrates content to a new system. We value your input and thank you for your patience as we work to provide you with an improved content experience!

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters