Splunk Instance

[manaveen]

What is a full splunk instance?

[Steve_G_]

The term "full splunk instance" is sometimes used in our documentation to distinguish the instance from a forwarder, particularly a universal forwarder.

[jay007ant · Accepted solution]

A Full Splunk instance that gathers and/or receives data from forwarders and writes them to disk.
It can operate alone or with other indexers load balanced, and can also act as search interface.
Full Splunk Instance are:

• Indexer
• "Heavy" Forwarder
• Search Head
• Deployment Server

I think you get Enterprise licensed version.

[DaveSavage]

Yes it is a full instance. In that context. Splunk release the full package. It will give you 30 days on the license then you need to either allow it to roll over to a free license (which doesn't have certain functionality such as user credentials and a few other bits - all of which is documented), or buy an enterprise license.
You can add plug-ins such as Hadoop, as you indicate. There isn't a Hadoop Spunk version if that is what you mean. It's a Splunk instance to which the Hadoop plug-in has been installed.

[manaveen]

Hi, I downloaded the free version of Splunk 5.0.1.
Is it a full splunk instance? Can hadoop splunk connect be integrated with this version of splunk??

[MuS]

could please rephrase your question and provide more information?