Getting Data In

Will running *NIX 4.6 and the Splunk Unix app version 5.1 together impact my license?

ylsul
Explorer

Will doing this double the amount of data that is being indexed?

Tags (3)
0 Karma

linu1988
Champion

No it's not. If you are forwarding duplicate data then it will be upon your license. You may want to get rid of duplicate configurations and only forward single copy of the monitoring parameter.

Thanks

0 Karma

ylsul
Explorer

Ok thanks!

0 Karma

ylsul
Explorer

Nope, enterprise. So it is just based on what is forwarded to the indexer from the clients? I was worried that running both *NIX apps in parallel would be thought of as the same thing.

0 Karma

linu1988
Champion

the amount of data you forward that will be calculated as license. Is it a trail license?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...