Installation

Trial license limits

samerfaour
Engager

Are the daily limits enforced right away or after an average period?

For example if I am testing importing 5 GB but it will be a one time import rather than a stream, then how is that handled? I will not exceed the average daily limit over 30 days.

Is this handled as one violation or several violations until 10 days after where the average is within the limit?

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @samerfaour,

with a trial licene you can index 500 MB/day and you can have two exceeds in 30 solar days.

As I said, it's better to exceed of many GBs in one day that few GBs in many days.

Ciao.

Giuseppe

View solution in original post

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @samerfaour,

good for you.

Ciao and happy splunking.

Giuseppe.

P.S.: Karma Points are appreciated 😉

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @samerfaour,

which kind license have you?

Anyway, Splunk counts the violations on a daily  basis and you cannot have more violations than a threshold depending on the kind of license (e.g. Trial License is blocked after only three violations, normal license blocs after 45 violations in 60 days, etc...).

When you're in violation, Splunk block searching after the followimng midnight.

Average isn't relevant: it's only relevant the number of exceedings in a period.

So, if you can distribute your ingestion avoiding to exceed license is better, otherwise, it's better to exceed one shot because the quantity of exceeding isn't relevant.

Ciao.

Giuseppe

0 Karma

samerfaour
Engager

I do not have any license yet. I am looking at testing and want to understand the license limits.

https://www.splunk.com/view/SP-CAAAAEQ

So in the scenario I described based on what you say here that would be treated as 1 violation for the first day import only, correct?

Day 1: 5 GB - 1 violation no restrictions

Day 2-30: 0GB - no violations

 

gcusello
SplunkTrust
SplunkTrust

Hi @samerfaour,

with a trial licene you can index 500 MB/day and you can have two exceeds in 30 solar days.

As I said, it's better to exceed of many GBs in one day that few GBs in many days.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...