https://community.splunk.com/t5/Security/How-is-the-license/m-p/333743#M12654 <P>Your license needs to be greater than the sum of data indexed by ALL indexers, not counting replication (if used). It also doesn't count internal indexes (_*) and summary indexes.</P> Wed, 07 Mar 2018 16:32:37 GMT richgalloway 2018-03-07T16:32:37Z https://community.splunk.com/t5/Security/How-is-the-license/m-p/333742#M12653 <P>Hello Splunk - we have two indexers and one search node (acting as license master). We noticed the search node showing we maxed out our 5g license by %250. If every indexer receives less than 5g shouldnt be ok? or is the sum of traffic on each indexer what is counted? thank you for clarifying this !</P> <P>Thanks!</P> Wed, 07 Mar 2018 15:09:43 GMT https://community.splunk.com/t5/Security/How-is-the-license/m-p/333742#M12653 kisero 2018-03-07T15:09:43Z https://community.splunk.com/t5/Security/How-is-the-license/m-p/333743#M12654 <P>Your license needs to be greater than the sum of data indexed by ALL indexers, not counting replication (if used). It also doesn't count internal indexes (_*) and summary indexes.</P> Wed, 07 Mar 2018 16:32:37 GMT https://community.splunk.com/t5/Security/How-is-the-license/m-p/333743#M12654 richgalloway 2018-03-07T16:32:37Z