How is Splunk license usage calculated?

[RAYUDU_NARA]

Hi ,

we have 8GB License in Splunk Production Index and around 200 forwarders connected to this Indexer. Now a days License reaching around 6GB, still we want to configure few more forwarders. Can you please let me know, how the license consuming and how it eating the license.

• License consumes based on the MB/Day or number of files?
• If it is depends on MB/Day, per 1GB how much data we can forward ?

[kmorris_splunk]

Licensing is by data ingested in a 24 hour period, and is not related to the number of forwarders. The amount of data can vary greatly depending on the source.

[ChrisG]

There is substantial documentation about licensing in the Admin Manual, starting with the topic How Splunk Enterprise licensing works. You might also be interested in the License Usage Report View, which is also documented.