Installation

Is license usage metered on raw data only?

rroberts
Splunk Employee
Splunk Employee

Is license usage metered on raw data only or does it include hosts. data,  source types. data, sources, and extracted search terms (assuming this is strings.data) as well?

Labels (1)
Tags (1)
1 Solution

dwaddle
SplunkTrust
SplunkTrust

License usage is based on your raw data volumes, not counting any data in the _internal index or any summary index. Based on your question, I assume you're looking in the bucket directory structure at these files. The rawdata files themselves don't necessarily correlate to license usage because they are compressed.

View solution in original post

woodcock
Esteemed Legend

License is calculated against raw data and does not include the size of your metadata or indexes into your raw data.

0 Karma

dwaddle
SplunkTrust
SplunkTrust

License usage is based on your raw data volumes, not counting any data in the _internal index or any summary index. Based on your question, I assume you're looking in the bucket directory structure at these files. The rawdata files themselves don't necessarily correlate to license usage because they are compressed.

mabbez
New Member

Where do I check what is eating up at my license. been receiving the following message for the past few days:

Error in 'litsearch' command: Your Splunk license expired or you have exceeded your license limit too many times. Renew your Splunk license by visiting www.splunk.com/store or calling 866.GET.SPLUNK.
0 Karma

rroberts
Splunk Employee
Splunk Employee

So search terms, Metadata fields are not a factor in defaultdb?

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...