Installation

How do I get a free license?

Splunk Employee
Splunk Employee

I'd like a use the free license, what do I need to do?

Tags (1)
1 Solution

Splunk Employee
Splunk Employee

Version 4 support of the free license was introduced in version 4.0.5. Splunk Free is designed for personal, ad-hoc search and visualization of IT data. You can use Splunk Free for ongoing indexing of small volumes (<500MB/day) of data.

If you go over 500MB/day more than 3 times in a 30 day period, Splunk will continue to index your data, but search will be disabled until you are back down to 3 or fewer times in the 30 day period.

To switch to a Free License via the web interface:

  • Log in to Splunk Web as a user with admin privileges and navigate to Manager > License.
  • Review the text below the License and usage area, find the switch to a free license link, and click it. A login page is displayed.
  • Select Switch to Free License and click Continue.
  • You are prompted to reboot.

To switch to a Free License via the command line:

  • Copy the $SPLUNK_HOME/etc/splunk-free.license to $SPLUNK_HOME/etc/splunk.license
  • Restart Splunk (./splunk restart)

View solution in original post

Communicator

add to server.conf seems like a solution.. if using a forwarder.

[license]
active_group = Forwarder

0 Karma

Splunk Employee
Splunk Employee

In 4.2 to switch to free license:

  • login the UI, go to manager > licensing
  • change the license group to "free license"
  • restart

Communicator

Anyway at cmdline to change it? especially when using LWF/forwarders and gui is not running?

0 Karma

Splunk Employee
Splunk Employee

Version 4 support of the free license was introduced in version 4.0.5. Splunk Free is designed for personal, ad-hoc search and visualization of IT data. You can use Splunk Free for ongoing indexing of small volumes (<500MB/day) of data.

If you go over 500MB/day more than 3 times in a 30 day period, Splunk will continue to index your data, but search will be disabled until you are back down to 3 or fewer times in the 30 day period.

To switch to a Free License via the web interface:

  • Log in to Splunk Web as a user with admin privileges and navigate to Manager > License.
  • Review the text below the License and usage area, find the switch to a free license link, and click it. A login page is displayed.
  • Select Switch to Free License and click Continue.
  • You are prompted to reboot.

To switch to a Free License via the command line:

  • Copy the $SPLUNK_HOME/etc/splunk-free.license to $SPLUNK_HOME/etc/splunk.license
  • Restart Splunk (./splunk restart)

View solution in original post

Splunk Employee
Splunk Employee
0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!