License Usage Monitoring Events

The following article exclusively pertains to a Graylog Enterprise feature or functionality. To learn more about obtaining an Enterprise license, please contact the Graylog Sales team.

The License Usage Monitoring event type provides the ability to alert on daily license usage. You can choose to trigger an alert based on absolute thresholds or a percentage of your billing period limit. License Usage Monitoring events are created using the standard event definition workflow and support scheduling, event procedures, and alerting like other event types in Graylog. However, you can also create a quick event definition from the Graylog License Management page.

This topic explains the configuration options for License Usage Monitoring events as well as describing the alternate method to create this event type.

Prerequisites

Before proceeding, ensure that the following prerequisites are met:

  • You must have a valid Graylog Enterprise license.

Configuration Options

Defining a License Usage Monitoring event follows the standard event definition workflow. This even type includes the following unique configuration options:

Threshold Type

Set how to define the license threshold. Select either:

  • Percentage: Monitor percentage of license limit for the current billing period.

  • Absolute: Monitor absolute GiB thresholds for the current billing period.

Percentage Threshold (%)

Set the percentage of your billing period's allowed volume (0-100) that can be used before an alert is triggered. This field appears only if you select Percentage as the Threshold Type.

Absolute Threshold (GiB)

Set the license usage in GiB before an alert is triggered. This field appears only if you select Absolute as the Threshold Type.

Execute Every

Define how often to check license usage.

If you are following the standard event definition workflow, note that License Usage Monitoring events have no option to create custom fields. This event type monitors overall license usage, but does not look at individual log messages. Therefore, the Fields screen in the event definition workflow is not available.

Create an Event from the License Management Page

The Graylog License Management page (Enterprise > Licenses) is where you can view active licenses, monitor license usage, and import new licenses when necessary. In addition, you can create a License Usage Monitoring event from this page:

  1. Select Create License Alert.

  2. Set the Threshold type, either Absolute or Percentage.

  3. Set the threshold value.

    If your selected Absolute, enter an appropriate GiB value.

    If you selected Percentage, enter a percentage (0-100).

  4. Select Create Alert.

The event is created and saved on the Event Definitions page (Alerts > Event Definitions) and you are shown the event summary page for the new event.

Hint: When you create an event definition through the "quick add" method, you cannot select all of the options available in the full event definition workflow. To update the event title or to add notifications, event procedures, or other options, edit the event from the Event Definitions page.

Further Reading

Explore the following additional resources and recommended readings to expand your knowledge on related topics: