Just an update (since this dated page comes up as a search result about Splunk Free license): I just installed 7.2.3 to use for a class. When I go to check the License in settings, I noticed that all it says for Free is it does not support auth (and has the 500MB limit), while Enterprise says it adds alerting. This would imply that the Free level does not support alerting. I am using this to learn Enterprise; once I finish the class I'll try switching the license and see if alerting still works. ... View more

Here is the script 7.2.2 creates with splunk enable boot-start -user splunk, since I didn't see it loaded anywhere: #This unit file replaces the traditional start-up script for systemd #configurations, and is used when enabling boot-start for Splunk on #systemd-based Linux distributions. [Unit] Description=Systemd service file for Splunk, generated by 'splunk enable boot-start' After=network.target [Service] Type=simple Restart=always ExecStart=/opt/splunk/bin/splunk _internal_launch_under_systemd LimitNOFILE=65536 SuccessExitStatus=51 52 RestartPreventExitStatus=51 RestartForceExitStatus=52 User=splunk Delegate=true MemoryLimit=100G CPUShares=1024 PermissionsStartOnly=true ExecStartPost=/bin/bash -c "chown -R splunk:splunk /sys/fs/cgroup/cpu/system.slice/%n" ExecStartPost=/bin/bash -c "chown -R splunk:splunk /sys/fs/cgroup/memory/system.slice/%n" [Install] WantedBy=multi-user.target ... View more