Does KV Store run in the Free License

[dlpco]

I am trying to figure out if the KV Store runs in the Free License of 6.2. If it does, how can you tell what it is doing because the DMC is not available in the free license.

[ChrisG]

This is a known issue in Splunk Enterprise 6.2 (SPL-92740). KV store should be available under the free license. This defect will be fixed in a forthcoming maintenance release.

[ChrisG]

The 6.2.1 release is available now and includes the fix for this issue. http://docs.splunk.com/Documentation/Splunk/latest/ReleaseNotes/6.2.1

[Muryoutaisuu]

Thanks for update

[dlpco · Accepted solution]

Well - I tried it and got the following errors:
Error in 'inputlookup' command: The lookup table 'Requires license feature=KVStore' is invalid.

Looking at the splunkd.log I find the following lines:
INFO LMTracker - Setting feature=KVStore state=ENABLED (featureStatus=1)
a few lines later.....
INFO LMTracker - Setting feature=KVStore state=DISABLED_DUE_TO_LICENSE (featureStatus=2)

I guess that this is saying that KV Store is not valid in the Free License?

[Muryoutaisuu]

You could look it up. First you have to create a lookup stanza in transforms.conf :

[COLLECTIONNAME_lookup]

external_type = kvstore

collection = COLLECTIONNAME

fields_list = _key, COMMA_SEPARATED_FIELDLIST_OF_YOUR_KVSTORE

Then you could run a search like:
| inputlookup COLLECTIONNAME_lookup

Hope that works in free license.

[gfuente]

Hello

It seems that it´s not a excluded feature:

http://docs.splunk.com/Documentation/Splunk/latest/Admin/MoreaboutSplunkFree

So it should work...

Regards