Security

License: Do I have to pay for an extra license in a hybrid environment?

tomasnelson
Explorer

I'm planning an environment where I want to have all my universal forwarder clients to a local splunk server and this server makes the forwarder to an instance in the cloud.

do I need to buy an extra local license to the cloud license?

Tags (2)
0 Karma
1 Solution

gjanders
SplunkTrust
SplunkTrust

Splunk licensing (official documentation here) is measured in terms of indexed data per day, the size measured is raw data size and normally purchased in GB/day.
The source that forwarded the data should not make any difference to your licensing / cloud purchase.

The volume of data per day is going to influence how much license you require in your cloud (or on prem instance).

Forwarders do not require a license to forward data, you can use the forwarder license on heavy forwarders or point them to a license master, either way the license will not be used for forwarding of data.

View solution in original post

0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Hey @tomasnelson, if they solved your problem, remember to "√Accept" an answer to award karma points 🙂

0 Karma

gjanders
SplunkTrust
SplunkTrust

Splunk licensing (official documentation here) is measured in terms of indexed data per day, the size measured is raw data size and normally purchased in GB/day.
The source that forwarded the data should not make any difference to your licensing / cloud purchase.

The volume of data per day is going to influence how much license you require in your cloud (or on prem instance).

Forwarders do not require a license to forward data, you can use the forwarder license on heavy forwarders or point them to a license master, either way the license will not be used for forwarding of data.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...