Indexed Data (Splunk Log Observer)
Catalog row in Vendor License Metrics · Cited
- Unit
- GB
- Aliases
- Ingested Data (Log Observer)
- Definition
- Purchase Capacity and Limitations: for usage-based pricing Splunk Log Observer is measured by Volume of Indexed Data or Ingested Data; "Indexed Data" means logs that are parsed, extracted and indexed for fast querying, and "Ingested Data" means logs that are stored in the customer's object store and not queried.
- Counting rules
- Host-based pricing counts Hosts instead. Indexed Data has 30-day retention, expandable to 60 or 90 days. Available only to customers of Splunk IM, Splunk APM or Splunk Observability Cloud.
- Floors / minimums
- Requires Splunk IM, APM or Observability Cloud.
- Applies to products
- Splunk Log Observer
- Related metrics
- Product category