All Apps and Add-ons

Splunk App for VMware - Licence

abdulhasnath
New Member

Hi, I have installed this app and configured it using the addon. I was able to see the data, however, I am exceeding the trial licence daily limit of 2GB. Currently, I have 5GB data coming in, as a result, I cannot view anything. Can you please advise how I can reduce what is coming in from the addon? So that I can use the app and experiment if it is suitable for our needs?
Thanks
Abdul

0 Karma

MoniM
Communicator

Hi @abdulhasnath ,
If you want to limit your data, you can configure props.conf and transforms.conf. You can discard unwanted data by routing it to nullQueue.
NOTE- When you filter out data in this way, the filtered data is not forwarded or added to the index at all, and doesn't count toward your indexing volume.

For detail information, you can follow the documentation here https://docs.splunk.com/Documentation/Splunk/6.0.3/Forwarding/Routeandfilterdatad#Filter_event_data_...

Hope it helps!!
Thanks

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...