Getting Data In

Multiple indexes and license limits

steve
Path Finder

Does data indexed in two separate indexes count twice against the license limit?

Tags (2)
0 Karma
1 Solution

gekoner
Communicator

Sorta. All data being indexed, no matter which Index it goes into is being counted toward your license. EXCEPT data you put into summary indexes, and also all events going into the internal indexes are NOT counted towards your license.(Kristian Kolb)
If you are indexing the same data twice. I.e. if the same data is going to Index1 and Index2, then ALL data is counted against your license. So in that sense your data is counted twice.

see this doc - 1http://docs.splunk.com/Documentation/Splunk/4.3/Admin/HowSplunklicensingworks
Specifically, “Splunk licenses specify how much data you can index per calendar day…”

I'd recommend you download and install the Deployment Monitor App. This will really help you get an idea of what data you are indexing, and from where, and how it is being counted against your license.
1http://docs.splunk.com/Documentation/Splunk/latest/Admin/Manageyourlicenses

View solution in original post

kristian_kolb
Ultra Champion

gekoner is right, but you should know that stuff you put into summary indexes, and also all events going into the internal indexes are NOT counted towards your license.

/k

gekoner
Communicator

Sorta. All data being indexed, no matter which Index it goes into is being counted toward your license. EXCEPT data you put into summary indexes, and also all events going into the internal indexes are NOT counted towards your license.(Kristian Kolb)
If you are indexing the same data twice. I.e. if the same data is going to Index1 and Index2, then ALL data is counted against your license. So in that sense your data is counted twice.

see this doc - 1http://docs.splunk.com/Documentation/Splunk/4.3/Admin/HowSplunklicensingworks
Specifically, “Splunk licenses specify how much data you can index per calendar day…”

I'd recommend you download and install the Deployment Monitor App. This will really help you get an idea of what data you are indexing, and from where, and how it is being counted against your license.
1http://docs.splunk.com/Documentation/Splunk/latest/Admin/Manageyourlicenses

Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...