https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-Enterprise-Security-Does-Splunk-count-Threat-Feed-towards/m-p/246674#M1727 <P>Splunk counts anything that is indexed. If you are referencing downloaded threat data for Splunk Enterprise Security, that goes into KVstore and lookup tables which is not an index so it is not a license usage thing.</P> Sun, 16 Oct 2016 14:07:41 GMT starcher 2016-10-16T14:07:41Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-Enterprise-Security-Does-Splunk-count-Threat-Feed-towards/m-p/246673#M1726 <P>Does Splunk count Threat feeds towards the data usage? For example: if I download 1G of threat feed data every day, will I blow my data feed budget?</P> Thu, 13 Oct 2016 20:02:24 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-Enterprise-Security-Does-Splunk-count-Threat-Feed-towards/m-p/246673#M1726 roodrap 2016-10-13T20:02:24Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-Enterprise-Security-Does-Splunk-count-Threat-Feed-towards/m-p/246674#M1727 <P>Splunk counts anything that is indexed. If you are referencing downloaded threat data for Splunk Enterprise Security, that goes into KVstore and lookup tables which is not an index so it is not a license usage thing.</P> Sun, 16 Oct 2016 14:07:41 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-Enterprise-Security-Does-Splunk-count-Threat-Feed-towards/m-p/246674#M1727 starcher 2016-10-16T14:07:41Z