Key/Value store is my favorite one of the recent Splunk features.I'm loving this feature, though, now I have concerns about license.If I put a lot of data into Splunk as Key/Value data, are these data counted by Splunk License?
Thank you for helping me.
I don´t think so, as the license is counted during the indexing pipeline, and the kv store is updated through rest or other methods.
So I´m pretty sure it won´t count agains license, in the same way that using a csv lookup doesn´t count
View solution in original post
gfuente is correct, data in the KV Store does not count against index licensing.