Hi, Guys! I'm Splunk engineer 😄
The Question is
Associated with the Light forwarder and Indexer, When transferring data after filtering settings(props.conf, transforms.conf) Indexer from Light Forwarder . => Only the filtered data is applied to the license?
We have no time to do project so, I look forward to your answer assp!^^
Sorry, Recently Many Programming issue is happing so we can't figure it.. And thanks your answer!
I'm confused as to what your "Splunk Engineer" title is supposed to mean. Are you the guy in the project with the most Splunk knowledge?
Only data that gets indexed in Splunk counts towards your license usage quota.
Any data that is filtered out and not indexed won't count towards your license usage.