Hi there
I am new to splunk and I am playing with some live data . my problem is that every time my daily limit for indexing exceeds over 500MB. Due to that, sometime I am not able to make some query and every time I need to reinstall the same which affect my capability and time consuming thing.I want to increase that daily limit so that I can perform on test data which is live...
Thanks in advanced
See the https://docs.splunk.com/Documentation/Splunk/8.2.6/Admin/TypesofSplunklicenses document.
If you're using the free or trial license, you're capped at 500MB and there's nothing you can do about short of purchasing a paid license or - if it's a matter of "try before you buy case" - contacting your Splunk Partner for a short-termed Sales Trial license.
Hi
500MB is a daily ingestion limit unless you have paid Splunk license. If/when you have paid license on your company, then you can ask developer licenses for developing purposes. If you are needing bigger daily ingestion amount for production data, then you must by it from Splunk or your local partner.
r. Ismo