Splunk License Breach and No-enforcement license

[anil15694]

Hi All,

We are having enterprise license version 7.2.4. Can we be able to do searches and indexing data after 5 license breach in a rolling month?

As I know, if we are having No-enforcement license, Search will be enabled after 5 license breach but not sure about Indexing of new data will be enabled or not?

Thanks

[martin_mueller]

Indexing always carries on, even if you have no license.