split splunk license per index

[bob87]

Hi

If I have 2 Splunk licenses of 2GB each, can I limit the usage of the license per index? For example indexes A, B and D use license 1 while indexes C and E use license 2

Thanks

[alacercogitatus]

Licenses can be split into pools, but those pools only apply at the Indexer level, not specific indexes.

http://docs.splunk.com/Documentation/Splunk/latest/Admin/Groups,stacks,pools,andotherterminology

[kristian_kolb]

Well, yes it can be done. If you set up two different indexers, without license pooling, and configure indexes A, B, and D on indexer_1 and indexes C and E on indexer_2.

Then configure the forwarders to only send events to one indexer.

/K