help on basic question about license usage

[jip31]

hi

I have a question concerning the license volume usage 

if a company ingest data with an UF but also with WinRM or Syslog, does the license usage volume concern just the data collected by the UF or also the data collected with WinRM and Syslog?

Thanks

[gcusello · Accepted solution]

Hi @jip31,

the license consuption counts all the daily indexed logs, it isn't relevant where they come from.

The only exceptions are internal logs and summary logs.

for more infos see at https://docs.splunk.com/Documentation/Splunk/9.1.0/Admin/HowSplunklicensingworks

Ciao.

Giuseppe

[gcusello]

Hi @jip31,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉