Splunk Enterprise Security

Splunk Enterprise Security: Does Splunk count Threat Feed towards license usage?

roodrap
New Member

Does Splunk count Threat feeds towards the data usage? For example: if I download 1G of threat feed data every day, will I blow my data feed budget?

0 Karma

starcher
SplunkTrust
SplunkTrust

Splunk counts anything that is indexed. If you are referencing downloaded threat data for Splunk Enterprise Security, that goes into KVstore and lookup tables which is not an index so it is not a license usage thing.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...