Deployment Architecture

Is it possible to forward same data to different Splunk platforms/indexers clusters without using double license usage?

splunkreal
Motivator

Hello,

Is it possible to forward same data to different Splunk platforms / indexers clusters without using double license usage?

Thanks

 

* If this helps, please upvote or accept solution if it solved *
Labels (4)
Tags (2)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @splunkreal,

you can send the same log to more than one Indexer or Indexer Cluster but you pay twice the license.

The only way to avoid to pay twice the license is to have one Indexers Cluster and replicate data between all indexers, no other solutions.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...