https://community.splunk.com/t5/Getting-Data-In/Stop-usage-when-it-reaches-500MB/m-p/143858#M29372 <P>Hi anil1575,</P> <P>No, there is no such feature in Splunk. It will continue to index, but it will get you a license violation <A href="http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/Aboutlicenseviolations">http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/Aboutlicenseviolations</A></P> <P>There could be a way to stop Splunk at all if it reaches near the 500Mb limit....create a script that pulls the license info over REST and stop the service/process....but then Splunk is stopped completely and you would not be able to search any more.</P> <P>Like the docs states <A href="http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/Aboutlicenseviolations#How_to_avoid_license_violations">http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/Aboutlicenseviolations#How_to_avoid_license_violations</A> , if you're reaching your license limit try reducing the volume sent or get yourself a bigger license.</P> <P>cheers, MuS</P> Fri, 05 Dec 2014 06:42:52 GMT MuS 2014-12-05T06:42:52Z https://community.splunk.com/t5/Getting-Data-In/Stop-usage-when-it-reaches-500MB/m-p/143857#M29371 <P>I have free license splunk. <BR /> Licensed daily volume 500 MB- How do I stop usage when it reaches 500MB?,</P> <P>Is there a way to stop indexing when it reaches 500 MB?</P> Fri, 05 Dec 2014 04:43:17 GMT https://community.splunk.com/t5/Getting-Data-In/Stop-usage-when-it-reaches-500MB/m-p/143857#M29371 anil1575 2014-12-05T04:43:17Z https://community.splunk.com/t5/Getting-Data-In/Stop-usage-when-it-reaches-500MB/m-p/143858#M29372 <P>Hi anil1575,</P> <P>No, there is no such feature in Splunk. It will continue to index, but it will get you a license violation <A href="http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/Aboutlicenseviolations">http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/Aboutlicenseviolations</A></P> <P>There could be a way to stop Splunk at all if it reaches near the 500Mb limit....create a script that pulls the license info over REST and stop the service/process....but then Splunk is stopped completely and you would not be able to search any more.</P> <P>Like the docs states <A href="http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/Aboutlicenseviolations#How_to_avoid_license_violations">http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/Aboutlicenseviolations#How_to_avoid_license_violations</A> , if you're reaching your license limit try reducing the volume sent or get yourself a bigger license.</P> <P>cheers, MuS</P> Fri, 05 Dec 2014 06:42:52 GMT https://community.splunk.com/t5/Getting-Data-In/Stop-usage-when-it-reaches-500MB/m-p/143858#M29372 MuS 2014-12-05T06:42:52Z