Query on accessing Hadoop data in Splunk using "Splunk App for HadoopOps"

[keerthana_k]

Hi,

We have a Hadoop cluster where in we are storing data. We have downloaded Splunk enterprise and the Splunk App for Hadoop Ops to look into our Hadoop cluster operations. We are not going to be indexing any data into the Splunk instance.

This being the case, do we have to pay for the license? As per my knowledge, license is only required when data needs to be indexed into Splunk.

Thanks,
Keerthana

[kschon_splunk · Accepted solution]

That app creates various Splunk indexes, and adds to them periodic data about your Hadoop cluster. So the app itself is indexing data which will count against your license. If that's the only thing you are doing with your Splunk install, the data volume may fit within what is allowed by the Splunk Free license. For more information:

http://docs.splunk.com/Documentation/Splunk/6.5.1/Admin/MoreaboutSplunkFree
https://www.splunk.com/en_us/products/splunk-enterprise/free-vs-enterprise.html

[keerthana_k]

Thank you for your response. Does that mean that there won't be any need to buy additional license for data? We plan on using Splunk only for the app.

[kschon_splunk]

I think you should be fine. It depends on the data volume produced by the app, but it is very unlikely to exceed the Splunk Free limit. Note that Splunk Free is intended for individual use though.