Splunk Evidence

Data dropped by Splunk ingest actions does not count against the licence

Catalog row in Vendor License Evidence · Cited

Kind: Documentation excerpt
Excerpt: "Ingest-based licenses: Data that is filtered or routed by the ingest actions feature, such that the data does not get added to an index, does not count against your license."
Locator: License implications
Applies to: Data dropped by Splunk ingest actions does not count against the licence
Supports rules: Data dropped by Splunk ingest actions does not count against the licence
Related metrics: Daily Indexing Volume
Splunk vCPU
Splunk Virtual Compute (SVC)
Sources: License implications (Ingest Actions)