Does Splunk Enterprise Security (ES) require a separate license file?

[salohiddin]

I want to clarify how licensing works between Splunk Enterprise and Splunk Enterprise Security (ES).

If an organization purchases both Splunk Enterprise and Splunk ES, do they receive two separate license files or just one unified license file that covers both products?

Additionally, is there any way to verify from the Splunk console or license XML that ES entitlement is included bef?

[vjdev · Accepted solution]

Hello,

Only one License file you will get for Splunk Enterprise. Splunk ES can be downloaded via Splunk Base if your organization have purchased Splunk ES [Only with mapped account with the organization.]

Thannk You!

[richgalloway]

Splunk Enterprise Security does not use a license file.  Purchasing ES entitles you to download the app from splunkbase.  If you cannot download the app then you do not have a license (or your splunkbase account is not associated with the ES license).