LICENSEWARE
Cisco Rule

Splunk Enterprise under 100 GB: 45 warnings in a rolling 60 days blocks search

Catalog row in Vendor License Rules · Cited

Kind
Policy
Statement
About license violations (Splunk Enterprise 10.4) (Table of license violation conditions, Splunk Enterprise license): "If you have a license stack with less than 100 GB of data per day of license volume, and you generate 45 license warnings in a rolling 60 day period, you are in violation of your license."
Applies when
Daily indexing exceeds licensed volume repeatedly.
Applies to
Splunk Enterprise volume license stacks below 100 GB per day
Related metrics
Esc