Splunk Enterprise License Violations - Term License - No Enforcement License (6.5)

[ibraheem]

Hi,

We are continuously in violation the past 3 or 4 months as we are ingesting 600 to 800 GB extra on top of daily limit.

We have received multiple hard warnings. 

My question is what will happen if we continue to be in violation or exceed the daily indexing volume limit? 

I appreciate your answer in advance. Thanks.

[richgalloway · Accepted solution]

Because you have a no-enforcement license, there should be no ramifications from exceeding the daily indexing limit.  However, when it comes time to renew your license, Splunk may expect you to purchase a higher quota.