topic Re: Query on accessing Hadoop data in Splunk using "Splunk App for HadoopOps" in Getting Data In

Query on accessing Hadoop data in Splunk using "Splunk App for HadoopOps"

keerthana_k — Fri, 06 Jan 2017 11:44:13 GMT

Hi,

We have a Hadoop cluster where in we are storing data. We have downloaded Splunk enterprise and the Splunk App for Hadoop Ops to look into our Hadoop cluster operations. We are not going to be indexing any data into the Splunk instance.

This being the case, do we have to pay for the license? As per my knowledge, license is only required when data needs to be indexed into Splunk.

Thanks,
Keerthana

Re: Query on accessing Hadoop data in Splunk using "Splunk App for HadoopOps"

kschon_splunk — Fri, 06 Jan 2017 20:20:45 GMT

That app creates various Splunk indexes, and adds to them periodic data about your Hadoop cluster. So the app itself is indexing data which will count against your license. If that's the only thing you are doing with your Splunk install, the data volume may fit within what is allowed by the Splunk Free license. For more information:

http://docs.splunk.com/Documentation/Splunk/6.5.1/Admin/MoreaboutSplunkFree
https://www.splunk.com/en_us/products/splunk-enterprise/free-vs-enterprise.html

Re: Query on accessing Hadoop data in Splunk using "Splunk App for HadoopOps"

keerthana_k — Mon, 09 Jan 2017 10:10:39 GMT

Thank you for your response. Does that mean that there won't be any need to buy additional license for data? We plan on using Splunk only for the app.

Re: Query on accessing Hadoop data in Splunk using "Splunk App for HadoopOps"

kschon_splunk — Wed, 18 Jan 2017 22:37:14 GMT

I think you should be fine. It depends on the data volume produced by the app, but it is very unlikely to exceed the Splunk Free limit. Note that Splunk Free is intended for individual use though.