topic support about UF in Installation

support about UF

takeshi — Sat, 04 Jul 2020 13:35:42 GMT

If I create a free account and download Universal Forwarder, is there no limit on the number of days? If so, do I need a Community, Standard, or Premium contract to get support? Will the agreement apply to other accounts?

Re: support about UF

gcusello — Sat, 04 Jul 2020 16:16:27 GMT

Hi @takeshi ,

Re: support about UF

gcusello — Sat, 04 Jul 2020 16:21:28 GMT

Hi @takeshi ,

you can download all the Universal Forwarders you need and use them for all the time you want.

License is countered on the daily indexed logs and maintenance and support depend on the contract you have for your Splunk License.

UFs are covered by the Splunk license you have.

If you haven't any Splunk license you can only use a community support (that you have anyway!).

At these urls you can find all the informations you need:

https://www.splunk.com/en_us/support-and-services/support-programs.html

https://www.splunk.com/en_us/legal/splunk-software-support-policy.html

https://www.splunk.com/en_us/legal/splunk-general-terms.html

Ciao.

Giuseppe

Re: support about UF

takeshi — Sat, 04 Jul 2020 16:36:51 GMT

Hi @gcusello
Thank you for your reply.
It was very helpful!

Are accounts and licenses associated?
If I have another account and have a standard license, does the standard license apply to this account as well?

Re: support about UF

gcusello — Sat, 04 Jul 2020 16:47:29 GMT

Hi @takeshi ,

licenses are associated to the customer because they should open the Support cases, eventually asking to Splunk to put you in email chain.

You could ask to the customer or to your Splunk Channel Manager to associate also your eMail to the three references for that license so you can open a case for the customer.

If not, when you open a case (I repeat that the customer should open cases!), you can say that you're opening that case for your customer.

Ciao.

Giuseppe

Re: support about UF

takeshi — Sat, 04 Jul 2020 17:04:56 GMT

understood.
It means that it is possible only by downloading with an account that does not have a license. If I use the downloaded one with a licensed account, can I get support?

In the case of HF, is that impossible after 60 days?

Can a free account be used forever?

Re: support about UF

gcusello — Sat, 04 Jul 2020 17:13:08 GMT

Hi @takeshi ,

you can download all the UFs you want and use them with every account without limits in number of downloads and days.

Instead support by Splunk Support is related only to a license.

Support by Community is free but without SLA.

If instead you are speaking of a Splunk free license, you can use it for all the time you want but, but, after 60 days, with some limitations ( https://www.splunk.com/en_us/software/features-comparison-chart.html ) and you can access only to Community support not to Splunk Support.

Ciao.

Giuseppe

Re: support about UF

takeshi — Sat, 04 Jul 2020 17:42:24 GMT

Hi @gcusello

I'm sorry.
Current Status: I have two accounts. One has a standard license. The other is a free account without a license.

With this premise, I understood about UF.

Are HF and IDX Splunk Enterprise products?
If I download HF or IDX in a free unlicensed account, will it be supported in my licensed account?

Will it be available and supported for only 60 days?

Re: support about UF

gcusello — Sun, 05 Jul 2020 08:28:14 GMT

Hi @takeshi ,

with a Splunk account, you can download all the products (except Premium Apps, VictorOps and Phantom) and use them for a period related to your license.

HF dowsn't index anything so it's like another UF, but you have to configure it as a slave of the Master License.

Indexers, obviously, are under license.

If you speak of Splunk Support, all the Spunk components in one architecture can be supported by your license, it's not relevant that you downloaded them using a different account than the one with the license: when you have to open a case, you can use your license.

Ciao.

Giuseppe

Re: support about UF

takeshi — Sat, 25 Jul 2020 15:38:31 GMT

I'm sorry too late to reply for your message.

I resolved this ticket.

Thank you very much！