Splunk Enterprise Security

Splunk Enterprise Security: Does Splunk count Threat Feed towards license usage?

New Member

Does Splunk count Threat feeds towards the data usage? For example: if I download 1G of threat feed data every day, will I blow my data feed budget?

0 Karma


Splunk counts anything that is indexed. If you are referencing downloaded threat data for Splunk Enterprise Security, that goes into KVstore and lookup tables which is not an index so it is not a license usage thing.

0 Karma
Get Updates on the Splunk Community!

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...

Announcing General Availability of Splunk Incident Intelligence!

Digital transformation is real! Across industries, companies big and small are going through rapid digital ...