Systems and methods for maintaining an in-memory summary of mappings of indexing performed by a cluster of indexers

A computing device, comprising:

• a processor;
• and
• a non-transitory computer-readable medium having stored thereon instructions that, when executed by the processor, cause the processor to perform operations including:
• organizing a plurality of licenses into a first pool of licenses and a second pool of licenses, wherein the first pool of licenses is comprised of a first subset of licenses providing entitlement to index first types of data for up to a first total volume, and wherein the second pool of licenses is comprised of a second subset of licenses providing entitlement to index only a particular type of data up to a second total volume,
• building an in-memory representation of entitlements provided to a cluster of indexers,
• maintaining an in-memory summary of mappings of indexing performed by each indexer of the cluster of indexers to an applicable pool of licenses, wherein the applicable pool of licenses is either the first pool of licenses or the second pool of licenses,
• assessing, on an interval, whether any indexer of the cluster of indexers is in violation of a daily volume quota based on rules that govern the first pool of licenses and the second pool of licenses, and
• responsive to determining a first indexer is in violation of a first daily volume quota, routing a directive to a first indexer of the cluster of indexers resulting in an automated action reducing usage.

A non-transitory computer-readable medium having stored thereon instructions that, when executed by one or more processors, cause the one or more processor to perform operations including:

• organizing a plurality of licenses into a first pool of licenses and a second pool of licenses, wherein the first pool of licenses is comprised of a first subset of licenses providing entitlement to index first types of data for up to a first total volume, and wherein the second pool of licenses is comprised of a second subset of licenses providing entitlement to index only a particular type of data up to a second total volume;
• building an in-memory representation of entitlements provided to a cluster of indexers;
• maintaining an in-memory summary of mappings of indexing performed by each indexer of the cluster of indexers to an applicable pool of licenses, wherein the applicable pool of licenses is either the first pool of licenses or the second pool of licenses;
• assessing, on an interval, whether any indexer of the cluster of indexers is in violation of a daily volume quota based on rules that govern the first pool of licenses and the second pool of licenses;
• and
• responsive to determining a first indexer is in violation of a first daily volume quota, routing a directive to a first indexer of the cluster of indexers resulting in an automated action reducing usage.