I am trying to figure out if the KV Store runs in the Free License of 6.2. If it does, how can you tell what it is doing because the DMC is not available in the free license.
Well - I tried it and got the following errors:
Error in 'inputlookup' command: The lookup table 'Requires license feature=KVStore' is invalid.
Looking at the splunkd.log I find the following lines:
INFO LMTracker - Setting feature=KVStore state=ENABLED (featureStatus=1)
a few lines later.....
INFO LMTracker - Setting feature=KVStore state=DISABLED_DUE_TO_LICENSE (featureStatus=2)
I guess that this is saying that KV Store is not valid in the Free License?
This is a known issue in Splunk Enterprise 6.2 (SPL-92740). KV store should be available under the free license. This defect will be fixed in a forthcoming maintenance release.
The 6.2.1 release is available now and includes the fix for this issue. http://docs.splunk.com/Documentation/Splunk/latest/ReleaseNotes/6.2.1
Thanks for update
Well - I tried it and got the following errors:
Error in 'inputlookup' command: The lookup table 'Requires license feature=KVStore' is invalid.
Looking at the splunkd.log I find the following lines:
INFO LMTracker - Setting feature=KVStore state=ENABLED (featureStatus=1)
a few lines later.....
INFO LMTracker - Setting feature=KVStore state=DISABLED_DUE_TO_LICENSE (featureStatus=2)
I guess that this is saying that KV Store is not valid in the Free License?
You could look it up. First you have to create a lookup stanza in transforms.conf :
[COLLECTIONNAME_lookup]
external_type = kvstore
collection = COLLECTIONNAME
fields_list = _key, COMMA_SEPARATED_FIELDLIST_OF_YOUR_KVSTORE
| inputlookup COLLECTIONNAME_lookup
Hope that works in free license.
Hello
It seems that it´s not a excluded feature:
http://docs.splunk.com/Documentation/Splunk/latest/Admin/MoreaboutSplunkFree
So it should work...
Regards