Splunk search for Predicting future Splunk license usage
Copy
index=_internal sourcetype=splunkd source="*license_usage.log*" type=Usage | timechart span=1d avg(b) as b | predict b future_timespan=7
This search will output license usage over time as well as a prediction with a 95% confidence interval with the highest and lowest estimated values. The search will provide a prediction for 7 days into the future.