Getting Data In

Multiple indexes and license limits

steve
Path Finder

Does data indexed in two separate indexes count twice against the license limit?

Tags (2)
0 Karma
1 Solution

gekoner
Communicator

Sorta. All data being indexed, no matter which Index it goes into is being counted toward your license. EXCEPT data you put into summary indexes, and also all events going into the internal indexes are NOT counted towards your license.(Kristian Kolb)
If you are indexing the same data twice. I.e. if the same data is going to Index1 and Index2, then ALL data is counted against your license. So in that sense your data is counted twice.

see this doc - 1http://docs.splunk.com/Documentation/Splunk/4.3/Admin/HowSplunklicensingworks
Specifically, “Splunk licenses specify how much data you can index per calendar day…”

I'd recommend you download and install the Deployment Monitor App. This will really help you get an idea of what data you are indexing, and from where, and how it is being counted against your license.
1http://docs.splunk.com/Documentation/Splunk/latest/Admin/Manageyourlicenses

View solution in original post

kristian_kolb
Ultra Champion

gekoner is right, but you should know that stuff you put into summary indexes, and also all events going into the internal indexes are NOT counted towards your license.

/k

gekoner
Communicator

Sorta. All data being indexed, no matter which Index it goes into is being counted toward your license. EXCEPT data you put into summary indexes, and also all events going into the internal indexes are NOT counted towards your license.(Kristian Kolb)
If you are indexing the same data twice. I.e. if the same data is going to Index1 and Index2, then ALL data is counted against your license. So in that sense your data is counted twice.

see this doc - 1http://docs.splunk.com/Documentation/Splunk/4.3/Admin/HowSplunklicensingworks
Specifically, “Splunk licenses specify how much data you can index per calendar day…”

I'd recommend you download and install the Deployment Monitor App. This will really help you get an idea of what data you are indexing, and from where, and how it is being counted against your license.
1http://docs.splunk.com/Documentation/Splunk/latest/Admin/Manageyourlicenses

Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...