The number of end-users allowed to access the Splunk Searchhead is based on Hardware specifications and Internal Policy at your company. You should review the sizing guide. http://docs.splunk.com/Documentation/Splunk/6.2.0/Capacity/Referencehardware ... View more

see my answer and following steps like http://docs.splunk.com/Documentation/Splunk/6.1.4/DistSearch/Installadedicatedsearchhead ... View more

If you want to try Splunk's distributed features, you can do this for the first 60 days of your trial--you get Splunk Enterprise with all the enterprise features such as distributed search to try for free for 60 days, and then the license is then automatically converted to a Splunk Free license. if you need more than 60 days to try the features you can contact our sales team and ask for a trial license. ... View more

Not sure what you mean by "path to the database". DB Connect uses JDBC; JDBC will require a hostname (localhost in your case), a port number (generally 1521), and a service name or Oracle SID to identify the actual database. All of that information can be obtained from the Oracle lsnrctl command: "lsnrctl status" run as the oracle user on the *NIX database host (or as a Windows administrator on a Windows server). For a complete step-by-step guide to configuring Splunk and DB Connect for Oracle, check out this add-on: Real-Time Oracle 11g Log File Analysis You may also need to verify that any local host firewall is configured to allow connections to the Oracle Listener. ... View more