×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
CharlieJ-BGS
Engager
Member since: ‎09-03-2025
‎09-08-2025
Community Statistics
Posts 2
Solutions 0
Karma Given 2
Karma Received 0
Member Since ‎09-03-2025
View All

Re: Does SmartStore work on a standalone Splunk in...

by in Splunk Enterprise
‎09-03-2025 08:14 AM
‎09-03-2025 08:14 AM
Thank you @isoutamo and @gcusello for replying... I have done some testing and I am certain that I can use SmartStore with a Trial Licence, but I'd expect that. After converting my test server to a Free Licence I seem to be able to search old data, but I have a small worry that perhaps this data had been cached locally by my previous testing. @gcusello your response is similar to the other feedback I have received: that SmartStore probably isn't supported but I'm hoping to hear something that is definitive and/or points me to some relevant documentation since my own testing seems to contradict the advice I have received. @isoutamo thanks, I did read the documentation about the Free Licence and agree that there is no mention of SmartStore being a "disabled feature". My assumption is that it would be explicitly called out if it was being disabled under a Free Licence. So, at the moment I think that my testing "wins", i.e. shows that it does work, but I'm hoping that someone out there is able to share their own experience. ... View more

Does SmartStore work on a standalone Splunk instan...

by in Splunk Enterprise
‎09-03-2025 05:59 AM
‎09-03-2025 05:59 AM
I have a old Splunk Enterprise deployment which isn't used any more and the (volume) licence is due to expire soon. I have index data (cold buckets) stored in Google Cloud Storage using SmartStore. I will no longer be ingesting new data into Splunk but I need to keep this older data online/searchable for one year or longer. My high-level plan is to: Decommission the existing infrastructure, keeping the GCS-hosted index data Build a single-instance Splunk server, connected to the SmartStore/GCS location Run this instance using a Free Licence As far as I can tell, this plan will work. Indeed I have tested it by building a new Splunk instance and, during the Trial Licence period, I connected to GCS and performed test searches of the data. I have now switched this instance to a Free Licence and this data still appears to be searchable. Despite this testing I have been told that SmartStore cannot be used with a Free Licence. I have read the Splunk documentation about the licence and its restrictions and cannot see anything to support that assertion. Is it possible that I have missed something, or my testing might be awry? Does anyone have explicit  (successful) experience of using SmartStore on an instance running under the Free Licence? Is there anything I should be looking for in log files, etc. to demonstrate that all is working as I expect it to? ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎09-08-2025 01:12 AM
Karma given to
View All