If Splunk is free for indexing less than 500MB a day, why am i getting a message saying my Splunk license will expire?

Path Finder

I installed splunk on my Linux system, but now I am really confused because I thought it was free if I index less 500MB and now I am getting a message saying:

Your license will soon expire on Mon Jun 15 15:15:07 2015 ICT…

Please help what should I do…

Labels (2)
0 Karma


Hi cebo_myeza,

Yes, it is free if you use the free license. I f you install Splunk it will use the enterprise trail license at first; this one will expire. Read more here
You need to switch to the free license once, read more here

Hope that helps ...

cheers, MuS


When you download and install Splunk, you're actually using a trial license of Enterprise Splunk. If you are less than 500 MB / day, you could switch to Splunk Free, but some of the Enterprise Features will no longer work.

A comparison of Free versus enterprise features can be found:

If you are interested in switching from the Enterprise Trial to Splunk Free, look at this doc:

The alternative, if you want the enterprise features is to contact a Sales rep or Reseller for an Enterprise license.


beat me by 42 seconds 🙂

Get Updates on the Splunk Community!

2024 Splunk Career Impact Survey | Earn a $20 gift card for participating!

Hear ye, hear ye! The time has come again for Splunk's annual Career Impact Survey!  We need your help by ...

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...