Security

license pool violations - unallocated stack = headroom

r999
Path Finder

if you have a stack with say 200gb and you allocate

PoolA - 80GB
PoolB - 80GB

If PoolB went over the limit by 20GB would it automatically juts use the extra GB available and not cause a Real license violation?

OR if you allocated all of the stack:
PoolA - 100GB
PoolB - 100GB

and Pool A only used 50GB and PoolB wused 120GB Would this also cause a violation or would it understanmd that in total you hadnt caused a violation..

I.e. are violations at a Stack level or Pool level?

Obviously the goal here is to allocate pools some license but leave some shared head room to avoid lic violations....

Thanks

0 Karma
1 Solution

Drainy
Champion

Imagine the pools are independent of each other, as far as I am aware they will not share usage between them as you may have provisioned usage to one pool to account for spikes, this wouldn't be very stable if the system then shared the un-used pool license allowance.

Best practise is to organise a decent proof of concept with your sales rep (they can use a suitably large trial license) so you can be sure on how much you want to allocate and where.

More detail here

View solution in original post

0 Karma

jbsplunk
Splunk Employee
Splunk Employee

Draineh is correct, pools are independent of each other and a violation on a pool will incur a license violation.

0 Karma

Drainy
Champion

Imagine the pools are independent of each other, as far as I am aware they will not share usage between them as you may have provisioned usage to one pool to account for spikes, this wouldn't be very stable if the system then shared the un-used pool license allowance.

Best practise is to organise a decent proof of concept with your sales rep (they can use a suitably large trial license) so you can be sure on how much you want to allocate and where.

More detail here

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...