Splunk Enterprise

Indexing daily usage limitation

delta8
New Member

Hi there 

I am new to splunk and I am playing with some live data . my problem is that every time my daily limit for indexing exceeds over 500MB. Due to that, sometime I am not able to make some query and every time I need to reinstall  the same which affect my capability and time consuming thing.I want to increase that daily limit so that I can perform on test data which is live...

 

 

Thanks in advanced

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

See the https://docs.splunk.com/Documentation/Splunk/8.2.6/Admin/TypesofSplunklicenses document.

If you're using the free or trial license, you're capped at 500MB and there's nothing you can do about short of purchasing a paid license or - if it's a matter of "try before you buy case" - contacting your Splunk Partner for a short-termed Sales Trial license.

 

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

500MB is a daily ingestion limit unless you have paid Splunk license. If/when you have paid license on your company, then you can ask developer licenses for developing purposes. If you are needing bigger daily ingestion amount for production data, then you must by it from Splunk or your local partner.

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...