Splunk Enterprise

Indexing daily usage limitation

delta8
New Member

Hi there 

I am new to splunk and I am playing with some live data . my problem is that every time my daily limit for indexing exceeds over 500MB. Due to that, sometime I am not able to make some query and every time I need to reinstall  the same which affect my capability and time consuming thing.I want to increase that daily limit so that I can perform on test data which is live...

 

 

Thanks in advanced

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

See the https://docs.splunk.com/Documentation/Splunk/8.2.6/Admin/TypesofSplunklicenses document.

If you're using the free or trial license, you're capped at 500MB and there's nothing you can do about short of purchasing a paid license or - if it's a matter of "try before you buy case" - contacting your Splunk Partner for a short-termed Sales Trial license.

 

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

500MB is a daily ingestion limit unless you have paid Splunk license. If/when you have paid license on your company, then you can ask developer licenses for developing purposes. If you are needing bigger daily ingestion amount for production data, then you must by it from Splunk or your local partner.

r. Ismo

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...