topic Re: Splunk Instance in Splunk Enterprise

Splunk Instance

manaveen — Wed, 06 Feb 2013 07:41:18 GMT

What is a full splunk instance?

Re: Splunk Instance

MuS — Wed, 06 Feb 2013 08:46:57 GMT

could please rephrase your question and provide more information?

Re: Splunk Instance

jay007ant — Wed, 06 Feb 2013 09:45:31 GMT

A Full Splunk instance that gathers and/or receives data from forwarders and writes them to disk.
It can operate alone or with other indexers load balanced, and can also act as search interface.
Full Splunk Instance are:

Indexer
"Heavy" Forwarder
Search Head
Deployment Server

I think you get Enterprise licensed version.

Re: Splunk Instance

manaveen — Wed, 06 Feb 2013 10:39:44 GMT

Hi, I downloaded the free version of Splunk 5.0.1.
Is it a full splunk instance? Can hadoop splunk connect be integrated with this version of splunk??

Re: Splunk Instance

DaveSavage — Wed, 06 Feb 2013 10:47:16 GMT

Yes it is a full instance. In that context. Splunk release the full package. It will give you 30 days on the license then you need to either allow it to roll over to a free license (which doesn't have certain functionality such as user credentials and a few other bits - all of which is documented), or buy an enterprise license.
You can add plug-ins such as Hadoop, as you indicate. There isn't a Hadoop Spunk version if that is what you mean. It's a Splunk instance to which the Hadoop plug-in has been installed.

Re: Splunk Instance

Steve_G_ — Thu, 07 Feb 2013 20:02:23 GMT

The term "full splunk instance" is sometimes used in our documentation to distinguish the instance from a forwarder, particularly a universal forwarder.