Splunk Enterprise commercial end-user licenses
Customers can purchase a commercial end-user license to Splunk Enterprise based on either data volume or infrastructure. These Splunk Enterprise licenses are the most common license types. They provide access to the full set of Splunk Enterprise features within a defined limit of indexed data per day (volume-based license), or vCPU count (infrastructure license). Pricing and purchasing information are available on the Splunk website.
The Splunk Enterprise volume-based license
The following important points apply to the volume-based license:
- This volume-based license gives you access to all Splunk Enterprise features.
- This volume-based license allows for both single-instance and distributed installations of Splunk Enterprise.
- The volume-based license can be stacked and assigned to license pools. For information on allocating portions of a license, see Allocate license volume.
- This license cannot stack with an infrastructure-based license (explained in the next section).
- The license prevents searching if your license stack is less than 100 GB of data per day and there are a set number of license warnings. * To learn about license warnings and violation, see What happens during a license violation?
Contact Splunk for information about purchasing this license for Splunk Enterprise.
The Splunk Enterprise infrastructure license
The following important points apply to the infrastructure-based license:
- The infrastructure license gives you access to all Splunk Enterprise features.
- The infrastructure license is for both single-instance and distributed installations.
- The infrastructure licenses can be stacked with one another and assigned to pools. For information on allocating portions of a license, see Allocate license volume.
- The infrastructure license cannot stack with a volume-based license.
Contact Splunk for information about purchasing this license for Splunk Enterprise.
Compare Splunk Enterprise licenses
Consult this table for a comparison of Splunk Enterprise license types:
| License conditions | Enterprise: with less than 100 GB of data per day license stack | Enterprise: with 100 GB of data per day or larger license stack | Enterprise: Infrastructure (vCPU) |
|---|---|---|---|
| Currently blocks search while in violation | Yes | No | No |
| Logs internally and displays message in Splunk Web when in warning or violation | Yes | Yes | No |
| Stacks with other licenses | Yes | Yes | No |
| Enables full Splunk Enterprise feature set | Yes | Yes | Yes |