I have used the trial and cloud demo version of Splunk and I would like some information about the licensing.
I saw that when we reach the limit of the daily indexing, we receive a warning that blocks the search but keep indexing the data.
Imagine that I want to add new devices to the scope. Splunk will receive too much data and will send a warning. In this case, I want to increase the limit. Do I need to order a fresh new license or I can just upgrade the old one?