Local server information
Indexer name xxxxxx.com
License expiration Apr 26, 2013 6:28:39 PM
Licensed daily volume 500 MB
Volume used today 4,093 MB (818.68% of quota)
Warning count 3
Debug information All license details
All indexer details
I have a free license to Splunk, I simply use it to watch and visualize a tiny server that does nothing but file serving and streaming. The server does have a FQDN although there is little to no access on the web. I use it mostly for my own fiddling in my own time.
In theory - this should be quite adequate for the free Splunk license terms - yes?
I usually set up Splunk and forget about it after a few days but recently I was getting hammered by SSH attempts. I captured some traffic, created a temp rule to block all incoming traffic and I was going to use Splunk to visualize this data.
Once again I've apparently violated my license terms by collecting far too much data. It wont let me check the ssh attempts and it wont let me view all the crap data that it does appear to have collected. The last time this happened a few weeks ago, I just dumped the data and reindexed - what's the bloody point?
Really, is this what Splunk has become? EVERY new revision of Splunk seems to be becoming more and more restrictive even for those that have no intention of using it commercially.
Sad, sad days.
... View more