Getting Data In

Stop usage when it reaches 500MB

anil1575
New Member

I have free license splunk.
Licensed daily volume 500 MB- How do I stop usage when it reaches 500MB?,

Is there a way to stop indexing when it reaches 500 MB?

Tags (1)
0 Karma

MuS
SplunkTrust
SplunkTrust

Hi anil1575,

No, there is no such feature in Splunk. It will continue to index, but it will get you a license violation http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/Aboutlicenseviolations

There could be a way to stop Splunk at all if it reaches near the 500Mb limit....create a script that pulls the license info over REST and stop the service/process....but then Splunk is stopped completely and you would not be able to search any more.

Like the docs states http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/Aboutlicenseviolations#How_to_avoid_license_... , if you're reaching your license limit try reducing the volume sent or get yourself a bigger license.

cheers, MuS

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...