All Apps and Add-ons

Will the Splunk DB Connect app eat up my monthly index cap we have as part of our license?

ra01
Path Finder

I'm an analyst not a sysadmin, but I'm looking into proposing we use Splunk DB Connect. The one concern I'm trying to learn about is will it affect the monthly index cap limit we have as part of our license?

I couldn't find anything mentioned in the documentation.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

DB Connect won't affect your index any more than any other app. It all depends on how you use it. Just like you would be judicious about the log data you index (ignore DEBUG-level events, for example) so, too, should you be judicious about what you index using DB Connect.

---
If this reply helps you, Karma would be appreciated.
0 Karma

ra01
Path Finder

one of our tech guys asked me "how much data will you be indexing with that app?"

Can you help me think about how to answer him?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Our admins often ask that question. We then look at the source, see how much data is there, how much of that we want to index, add it up, and that's our answer.

Use your favorite SQL client to run sample queries against your database. See how much you get back and build your index estimate from that.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...