How to find out what we selected on installation of Splunk when it comes to sending data to Splunk?

New Member

We inherited Splunk from another team and my leadership wants to know if when Splunk was installed, if we opted out of sending information to Splunk. Is there a way to find out what the original installer selected for this option? I have not installed splunk so I am unsure if it even asks you if you want to opt out of sending splunk information to them.

Labels (1)
0 Karma

Splunk Employee
Splunk Employee

I found this in the docs for 7.1.1:

The instrumentation feature adds an
internal index and can increase disk
space usage (Originally introduced in
version 6.5)

The instrumentation feature of Splunk
Enterprise, which lets you share
Splunk Enterprise performance
statistics with Splunk after you opt
in, includes a new internal index
which can cause disk space usage to
rise on hosts that you upgrade. You
can opt out of sharing performance
data by following the instructions at
Share data in Splunk Enterprise in the
Admin Manual.

It appears that if you opt-in, since version 7.0, you will send license usage data by default.

0 Karma


Go to settings - > instrumentation

Click on the settings icon next to usage data to see what is turned on.

More details here

0 Karma

New Member

I should have said this in the original post, we are on 6.3.3. I don't have Settings -> Instrumentation when logged in as admin.

0 Karma


Documentation says "For the usage data logs to be created and available, your search heads, indexers, and cluster master must be running Splunk Enterprise version 6.5.0 or later."
So it might be a case that there is no collection prior to 6.5. I could be wrong.

0 Karma
Get Updates on the Splunk Community!

Splunk Education - Fast Start Program!

Welcome to Splunk Education! Splunk training programs are designed to enable you to get started quickly and ...

Five Subtly Different Ways of Adding Manual Instrumentation in Java

You can find the code of this example on GitHub here. Please feel free to star the repository to keep in ...

New Splunk APM Enhancements Help Troubleshoot Your MySQL and NoSQL Databases Faster

Splunk Observability has two new enhancements to make it quicker and easier to troubleshoot slow or frequently ...