Splunk Enterprise Security

How do I calculate the Enterprise security App license usage ?

vsskishore
Explorer

How do I calculate the Enterprise security App license usage ? Is it different from the Spunk Enterprise license ? Does the ES app use the base indexes of Splunk Enterprise or does it contain separate indexes ?

inventsekar
SplunkTrust
SplunkTrust

Question - How to calculate the Enterprise security App license usage ?
As per my understanding - Splunk ES is an app that sits on top of base Splunk. so, you need license for Base Splunk, that is enough.
As per below link also, Splunk Enterprise Security is a Splunk Premium Solution, which requires a Splunk Enterprise license or Splunk Cloud subscription.
Splunk Enterprise Security software is priced by how much data you send into your Splunk installation in a day.
https://www.splunk.com/en_us/software/pricing/faqs/cyber-security.html#Splunk-ES

Question - Is it different from spunk enterprise license ?
no. as explained above, no.. Splunk ES license is not different from splunk license.

Question - Is ES app use the base indexes of Splunk enterprise or does it contain separate indexes ?
Splunk ES uses base splunk's indexes.
and it uses some more indexes for its custom calculations.
more info here -
https://docs.splunk.com/Documentation/ES/5.2.0/Install/Indexes

As you are a new user to Splunk Answers, you can upvote the answers/comments,
if this answer resolved your query, you can select this answer and "accept" it as the answer, so that this question will be moved to answered queue. Happy Splunking!

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...

Index This | Divide 100 by half. What do you get?

November 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

❄️ Celebrate the season with our December lineup of Community Office Hours, Tech Talks, and Webinars! ...