Data dropped by Splunk ingest actions does not count against the licence
Catalog row in Vendor License Rules · Cited
- Kind
- Counting
- Statement
- For ingest-based licences, data filtered or routed by ingest actions so that it is not added to an index does not count. For workload-based licences, ingest actions workloads outside the indexing tier (for example on heavy forwarders) do not count.
- Applies when
- Using ingest actions to filter or route data.
- Applies to
- Splunk Enterprise; Splunk Cloud Platform.
- Related metrics