- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
We are continuously in violation the past 3 or 4 months as we are ingesting 600 to 800 GB extra on top of daily limit.
We have received multiple hard warnings.
My question is what will happen if we continue to be in violation or exceed the daily indexing volume limit?
I appreciate your answer in advance. Thanks.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


Because you have a no-enforcement license, there should be no ramifications from exceeding the daily indexing limit. However, when it comes time to renew your license, Splunk may expect you to purchase a higher quota.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


Because you have a no-enforcement license, there should be no ramifications from exceeding the daily indexing limit. However, when it comes time to renew your license, Splunk may expect you to purchase a higher quota.
If this reply helps you, Karma would be appreciated.
