topic Re: enterprise licensing for huge static local data in Installation

enterprise licensing for huge static local data

nina15 — Fri, 14 Oct 2011 04:01:31 GMT

Does splunk need enterprise licensing for local data resource with a static but huge size (i.e. ~90GB) ?

Re: enterprise licensing for huge static local data

kdenton — Fri, 14 Oct 2011 04:34:11 GMT

Slunk license is based on the amount you ingest in a 24 hour period, you get 500 mb per 24 hour per period.

Two solutions

One: chop the data into smaller chunks of 500 mb per day. Spunk will work just fine.

Two: License spline but for 90 GB would be a bit costly.

Re: enterprise licensing for huge static local data

Ayn — Fri, 14 Oct 2011 05:51:12 GMT

Three: Feed it all to Splunk as lookups! 😄

Re: enterprise licensing for huge static local data

nina15 — Fri, 14 Oct 2011 06:32:02 GMT

and then what the following means??

Note: Summary indexing volume is not
counted against your license.

source: splunk-license

Re: enterprise licensing for huge static local data

Ayn — Fri, 14 Oct 2011 07:55:56 GMT

It means that any summary indexing you are doing will not be counted when the amount of indexed data is retrieved. If you don't know what summary indexing is, here is some information on it in the docs: docs.splunk.com/Documentation/Splunk/latest/Knowledge/Usesummaryindexing

Re: enterprise licensing for huge static local data

nina15 — Fri, 14 Oct 2011 08:46:20 GMT

feeding will reach the maximum limit as well, right?
i got the yellow warning saying it has exceeded..
I read in licensing info that if the warning exists it will be counted as a license violation, resulting to blocking of testing version of Splunk...

Re: enterprise licensing for huge static local data

kdenton — Fri, 14 Oct 2011 13:41:32 GMT

Ayn is correct,

Think of a summary index as an index of data that has already been ingested.

So if I think about what you are doing above, you have about 90GB that spunk has never seen before, so with out an enterprise license you would be limited to 500MB per day.

Re: enterprise licensing for huge static local data

nina15 — Mon, 17 Oct 2011 04:06:22 GMT

you have about 90GB that spunk has
never seen before

great way of clarification... thanks!