Installation

How to Load 100 GB data with 5 GB license/day?

premforsplunk
Explorer

Hello folks,

Suppose I buy a 5 gb license, but want to do a one time "history" load of legacy data (say 100 gb) so that I have sufficient data for trending etc

Any way you know to get this done, instead of doing in chunks of 5 gb x 20 days?

Labels (1)
Tags (4)
0 Karma
1 Solution

FrankVl
Ultra Champion

Splunk licensing allows for such incidental spikes. See the following documentation for details: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Aboutlicenseviolations

View solution in original post

0 Karma

bangalorep
Communicator

If its a one time thing, you can do it in one go. It will however lead to a violation. Search will stop at the third violation.
To understand more about license violations:
http://docs.splunk.com/Documentation/Splunk/latest/Admin/Aboutlicenseviolations

FrankVl
Ultra Champion

Splunk licensing allows for such incidental spikes. See the following documentation for details: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Aboutlicenseviolations

0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...