Splunk forwarders do not incur licence usage and indexer cluster replicas are not counted
Catalog row in Vendor License Rules · Cited
- Kind
- Counting
- Statement
- Data is metered when indexed, so forwarders do not incur licence usage and usually need only the Forwarder license; heavy forwarders that index data need an Enterprise license. In indexer clusters only incoming data counts, not replicated data. All instances other than pure forwarders (search heads, deployment server, cluster manager, deployer, monitoring console) need access to an Enterprise license.
- Applies when
- Distributed or clustered Splunk Enterprise deployments.
- Applies to
- Splunk Enterprise.
- Related metrics