LICENSEWARE
Splunk Rule

Buying Splunk Enterprise Security adds no ingestion capacity

Catalog row in Vendor License Rules · Cited

Kind
Counting
Statement
Enterprise Security is a premium app used with Splunk Enterprise or Splunk Cloud Platform and requires a Daily Indexing Volume or vCPU licence. A customer with a 1 GB Daily Indexing Volume licence who buys ES can still ingest only 1 GB for Splunk Enterprise and ES combined; ES is licensed to be used on that ingested data.
Applies when
Sizing ES alongside the core platform licence.
Applies to
Splunk Enterprise Security.
Esc