We do have a 100GB Splunk Enterprise version, but the support statement is wrong. We're locked out of search. Our operations team reached out to Splunk support, they suggest we use an enterprise trial version or purchase a new Splunk license. Apparently there's a difference between an "Active License" and a "Perpetual License", the later being inactive, although it's valid, which means it's legally active, but there's no support, even if the application breaks due to a bug in license enforcement. I'm going to suggest the team forward to ELK, as it seems the heavy-forwarder capability is not impacted.
... View more