I am looking for the detailed information of Splunk behavior when Splunk annual term enterprise license expires.
Any pointer to the information would be appreciated.
Are you sure the indexing will be limited to 500MB after expiration? If I have a production with let's say 100GB License / Term and this expires, I would expect the search being disabled but indexing continued.
What the answer says: indexing will not stop, but the license will be reverted to 500MB if you choose to free. and the behavior of the latest Splunk version may be different from older version.