Splunk Free License and Free Forwarding

I recently downloaded Splunk. Right now, I am using the free license that came with Splunk software on three different servers. Is that ok? Or do I need a different free license for each instance of Splunk I have? If so, how do I get more free licenses?

I can also use forwarding with the free version of Splunk, correct? And how much data can I forward with the free version?

asked 29 Sep '10, 12:38

ericmoss
73●2●2●9
accept rate: 0%

2 Answers:

oldest newest most voted

I'd suggest that you check out http://docs.splunk.com/Documentation/Splunk/latest/Admin/MoreaboutSplunkFree for a lot more details about the Free vs Enterprise.

But, to answer your specific questions:

You can use the same free license, just remember you will have the limitations listed in the above link.
Yes you can. There's an actual splunk-forwarder.license - you can rename that to splunk.license and you're set.
It's not so much about the amount of data you can forwarder, it's the amount you index. The daily limit for indexing data is 500MB with a caveat. You can index as much as you want, but if you go over that limit 3 times in a 30 day period, searching will be disabled. For example, if you had 10gigs worth of data you wanted to index all at once, you can.

link

answered 29 Sep '10, 12:58

Brian Osburn
2.8k●14
accept rate: 22%

edited 23 Mar, 10:54

piebob ♦♦
2.4k●1●5●17

Thanks for the help! The main issue I have with using the the forward license is that it says I can only forward up to 1 MB per day. Any truth to that?

(29 Sep '10, 17:18) ericmoss

I'd say no, otherwise I'd be in trouble since I forward gigs a day using the free license :)

(29 Sep '10, 18:05) Brian Osburn

You can only index 1 Mb a day locally. But in forwarder mode, you are forwarding all your data to another indexer, so nothing should be indexed locally, so the "1 MB limit" really doesn't limit you in any way.

(29 Sep '10, 22:29) Lowell ♦

1	I found this link that talk about the features that you lost when use a Free license. http://docs.splunk.com/Documentation/Splunk/4.3/Admin/TypesofSplunklicenses#Free_license link answered 23 Mar, 09:37 gerardo_maya 30●2 accept rate: 0%

Post your answer

toggle preview

Follow this question

Email:

RSS:

Answers

Answers + Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

forwarding ×77
licensing ×42
free ×31

Asked: 29 Sep '10, 12:38

Seen: 1,862 times

Last updated: 23 Mar, 10:54

Splunk Free License and Free Forwarding

Follow this question

Splunk Resources

Related questions