Getting Data In

Is there a specific license needed to support indexing on a heavy forwarder?

dharris_splunk
Splunk Employee
Splunk Employee

Please advise as to whether a specific license is needed to support indexing on a heavy forwarder; Like an indexing license?

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

HF is just an indexer with local indexing disabled. So if you want to index locally you're effectively turning your server into indexer with additional forwarding enabled.

So while for "pure HF" the forwarder license will do, for "indexing HF" you need to properly license the instance as if you'd do with any other indexer.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @dharris_splunk ,

there's only one license to index logs, the normal license, as described at https://docs.splunk.com/Documentation/Splunk/9.3.1/Admin/TypesofSplunklicenses .

Only for HFs, there's a Forwarder license but it doesn't permits to locally index logs.

Ciao.

Giuseppe

0 Karma

sainag_splunk
Splunk Employee
Splunk Employee

 HF do NOT need an enterprise license if you are just ingesting/parsing. 

On a HF, if you are locally indexing "you need an enterprise license" 

 

 

 


If this reply helps, Please UpVote

If this helps, Upvote!!!!
Together we make the Splunk Community stronger 
0 Karma
Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Building Momentum: Splunk Developer Program at .conf25

At Splunk, developers are at the heart of innovation. That’s why this year at .conf25, we officially launched ...