- Splunk Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- How are violations counted?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How are violations counted?
I have Free licensed implementation that has stayed below 500 meg for the last 30 days, except for last Sunday, when on of the logs exploded to 1.5g. The problem cleared on Monday, but the license manager shows more than three violations.
Does it report each "over 500" change or over 500 is a day?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
5/18 and 5/19
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
License violations are counted one-per-day regardless of the size of the violation. The 'day' is defined by data indexed between midnight and midnight.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
5/18 and 5/19
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What are the dates of the violations?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So why is my Free version locked? Here is the usage for the past 30 days:
Date Indexer gb
1 05/19/14 bcuatjivaops 0.50
2 05/18/14 bcuatjivaops 1.47
3 05/17/14 bcuatjivaops 0.25
4 05/16/14 bcuatjivaops 0.40
5 05/15/14 bcuatjivaops 0.39
6 05/14/14 bcuatjivaops 0.42
7 05/13/14 bcuatjivaops 0.43
8 05/12/14 bcuatjivaops 0.39
9 05/11/14 bcuatjivaops 0.22
10 05/10/14 bcuatjivaops 0.27
11 05/09/14 bcuatjivaops 0.41
12 05/08/14 bcuatjivaops 0.44
13 05/07/14 bcuatjivaops 0.42
14 05/06/14 bcuatjivaops 0.43
15 05/05/14 bcuatjivaops 0.43
16 05/04/14 bcuatjivaops 0.26
17 05/03/14 bcuatjivaops 0.28
18 05/02/14 bcuatjivaops 0.42
19 05/01/14 bcuatjivaops 0.48
20 04/30/14 bcuatjivaops 0.48
21 04/29/14 bcuatjivaops 0.46
22 04/28/14 bcuatjivaops 0.47
23 04/27/14 bcuatjivaops 0.34
24 04/26/14 bcuatjivaops 0.32
25 04/25/14 bcuatjivaops 0.41
26 04/24/14 bcuatjivaops 0.42
27 04/23/14 bcuatjivaops 0.41
28 04/22/14 bcuatjivaops 0.42
29 04/21/14 bcuatjivaops 0.48
Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...
Splunk APM: New Product Features + Community Office Hours Recap!
Index This | Forward, I’m heavy; backward, I’m not. What am I?
