Deployment Architecture

Splunk 7.0 pricing model of metric index

elbywong
Explorer

For a metric index, is the license usage count on the log event parsed, or the extracted metric dimensions plus measurement?

1 Solution

gjanders
SplunkTrust
SplunkTrust

At the time of writing, as per How Splunk licensing works :

Unlike event data, metrics data counts
against a license at a fixed 150 bytes
per metric event. Metrics data does
not have a separate license. Ingesting
metrics data draws from the same
license quota as event data.

It's a fixed 150 bytes at this stage...

Alerts for Splunk Admins https://splunkbase.splunk.com/app/3796/
Version Control for Splunk https://splunkbase.splunk.com/app/4355/

View solution in original post

gjanders
SplunkTrust
SplunkTrust

At the time of writing, as per How Splunk licensing works :

Unlike event data, metrics data counts
against a license at a fixed 150 bytes
per metric event. Metrics data does
not have a separate license. Ingesting
metrics data draws from the same
license quota as event data.

It's a fixed 150 bytes at this stage...

Alerts for Splunk Admins https://splunkbase.splunk.com/app/3796/
Version Control for Splunk https://splunkbase.splunk.com/app/4355/

View solution in original post

elbywong
Explorer

Is that mean I can create unlimited metrics events which contain 150 bytes per metrics event?

0 Karma

rjthibod
Champion

It means that each metric event, regardless of its content, will count as 150 bytes against your daily indexing license allocation. A metric event with no dimensions (just time, measurement, and value) will count as 150 bytes, and a metric event with 15, 20, 25, 30, etc dimensions will also count as 150 bytes.

elbywong
Explorer

I got it. Great thanks for your answer!

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!