If Splunk is free for indexing less than 500MB a day, why am i getting a message saying my Splunk license will expire?

[cebo_myeza]

I installed splunk on my Linux system, but now I am really confused because I thought it was free if I index less 500MB and now I am getting a message saying:

Your license will soon expire on Mon Jun 15 15:15:07 2015 ICT…

Please help what should I do…

[MuS]

Hi cebo_myeza,

Yes, it is free if you use the free license. I f you install Splunk it will use the enterprise trail license at first; this one will expire. Read more here http://docs.splunk.com/Documentation/Splunk/6.2.3/Admin/TypesofSplunklicenses
You need to switch to the free license once, read more here http://docs.splunk.com/Documentation/Splunk/6.2.3/Admin/MoreaboutSplunkFree#Switching_to_Free_from_a...

Hope that helps ...

cheers, MuS

[acharlieh]

When you download and install Splunk, you're actually using a trial license of Enterprise Splunk. If you are less than 500 MB / day, you could switch to Splunk Free, but some of the Enterprise Features will no longer work.

A comparison of Free versus enterprise features can be found: http://www.splunk.com/en_us/products/splunk-enterprise/free-vs-enterprise.html

If you are interested in switching from the Enterprise Trial to Splunk Free, look at this doc: http://docs.splunk.com/Documentation/Splunk/6.2.3/Admin/MoreaboutSplunkFree

The alternative, if you want the enterprise features is to contact a Sales rep or Reseller for an Enterprise license.

[MuS]

beat me by 42 seconds 🙂