Installation

Are Key/Value Store data counted as Splunk license?

sunrise
Contributor

Hi Splunkers,

Key/Value store is my favorite one of the recent Splunk features.
I'm loving this feature, though, now I have concerns about license.
If I put a lot of data into Splunk as Key/Value data, are these data counted by Splunk License?

Thank you for helping me.

Labels (1)
Tags (3)
1 Solution

gfuente
Motivator

Hello

I don´t think so, as the license is counted during the indexing pipeline, and the kv store is updated through rest or other methods.

So I´m pretty sure it won´t count agains license, in the same way that using a csv lookup doesn´t count

Regards

View solution in original post

mgroves_splunk
Splunk Employee
Splunk Employee

gfuente is correct, data in the KV Store does not count against index licensing.

gfuente
Motivator

Hello

I don´t think so, as the license is counted during the indexing pipeline, and the kv store is updated through rest or other methods.

So I´m pretty sure it won´t count agains license, in the same way that using a csv lookup doesn´t count

Regards

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...