https://community.splunk.com/t5/Installation/Indexed-data-and-Licensing/m-p/67649#M1100 <P>Oh certainly. The license limit is definitely not on the total amount of data in the index, the limit is on how much you are allowed per day.</P> <P>Additionally you could even put all the 15GB of logs into Splunk on day 1 - you will get a license violation warning, but as long as you have less than 5 warnings in a rolling 30-day period you'll be fine (see <A href="http://docs.splunk.com/Documentation/Splunk/latest/Admin/Aboutlicenseviolations">http://docs.splunk.com/Documentation/Splunk/latest/Admin/Aboutlicenseviolations</A> ).</P> Wed, 08 Feb 2012 11:37:17 GMT Ayn 2012-02-08T11:37:17Z https://community.splunk.com/t5/Installation/Indexed-data-and-Licensing/m-p/67648#M1099 <P>For example i have 15 GB archive of log files, if my license for 1Gb per day, may i index my archive and work with it in Splunk? For examle, i will index 1 GB every day during 15 days, then i want to work with my indexed data which volume is 15 GB, can i do this? </P> Wed, 08 Feb 2012 11:14:32 GMT https://community.splunk.com/t5/Installation/Indexed-data-and-Licensing/m-p/67648#M1099 andrey2007 2012-02-08T11:14:32Z https://community.splunk.com/t5/Installation/Indexed-data-and-Licensing/m-p/67649#M1100 <P>Oh certainly. The license limit is definitely not on the total amount of data in the index, the limit is on how much you are allowed per day.</P> <P>Additionally you could even put all the 15GB of logs into Splunk on day 1 - you will get a license violation warning, but as long as you have less than 5 warnings in a rolling 30-day period you'll be fine (see <A href="http://docs.splunk.com/Documentation/Splunk/latest/Admin/Aboutlicenseviolations">http://docs.splunk.com/Documentation/Splunk/latest/Admin/Aboutlicenseviolations</A> ).</P> Wed, 08 Feb 2012 11:37:17 GMT https://community.splunk.com/t5/Installation/Indexed-data-and-Licensing/m-p/67649#M1100 Ayn 2012-02-08T11:37:17Z https://community.splunk.com/t5/Installation/Indexed-data-and-Licensing/m-p/67650#M1101 <P>Thank you.</P> Wed, 08 Feb 2012 11:39:43 GMT https://community.splunk.com/t5/Installation/Indexed-data-and-Licensing/m-p/67650#M1101 andrey2007 2012-02-08T11:39:43Z https://community.splunk.com/t5/Installation/Indexed-data-and-Licensing/m-p/67651#M1102 <P>No problem. Could you please mark my answer as accepted? Thanks!</P> Wed, 08 Feb 2012 11:40:45 GMT https://community.splunk.com/t5/Installation/Indexed-data-and-Licensing/m-p/67651#M1102 Ayn 2012-02-08T11:40:45Z