Installation

Is it posible to downgrade Splunk enterprise to Splunk free version?

stoksoz
New Member

Is it posible to downgrade from Splunk enterprise to Splunk free version? We are currently using the Splunk Enterprose version, and would like to downgrade to free version of splunk. How we can operate this downgrade withput loosing any log data?

Tags (1)
0 Karma

ddrillic
Ultra Champion
0 Karma

andrey2007
Contributor

Sure it is possible, you can change license to "Free license" under Licensing menu in Settings tab and stored data will not be lost (such easy way only for all in one installations!).

But you will face limitations of free license like access control, usage of distributed environment, daily data volume and etc.

You can read here more about Splunk licenses and limitations of free license
http://docs.splunk.com/Documentation/Splunk/6.5.3/Admin/TypesofSplunklicenses

pcsegal1
Explorer

Hi, could you please elaborate on "such easy way only for all in one installations"?
If I have an indexer cluster with 3 indexers, and one search head, is there any special procedure that needs to be performed to ensure the indexers will preserve the already existing data?

0 Karma

ajhstn
Explorer

Thanks, this answered my question.

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...