Documentation > Splunk > Release Notes > Splunk Free

Release Notes

 


What's new
Known issues for this release
Changelogs by version
Credits

Splunk Free

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.

Contents

Splunk Free

Starting in version 4.0.5, Splunk Free is back!

Splunk Free is a totally free (as in beer) version of Splunk. It allows you to index up to 500MB/day and will never expire. If you go over 500MB/day more than 3 times in a 30 day period, Splunk will continue to index your data, but search will be disabled until you are back down to 3 or fewer times in the 30 day period.

What's it for?

Splunk Free is designed for personal, ad-hoc search and visualization of IT data. You can use Splunk Free for ongoing indexing of small volumes (<500MB/day) of data. Additionally, you can use it for short-term bulk-loading and analysis of larger data sets--Splunk Free allows you to bulk-load much larger data sets up to 3 times within a 30 day period. This can be useful for forensic review of large data sets.

Need to look at some historical data? Want to investigate some trends over a long period of time? Splunk Free can help.

Learn more about Splunk Free including how to switch from the Enterprise Trial license to Free.

Retrieved from "http://docs.splunk.com/Documentation/Splunk/4.0.9/ReleaseNotes/SplunkwithaFreeLicense"

This documentation applies to the following versions of Splunk: 4.0.5 , 4.0.6 , 4.0.7 , 4.0.8 , 4.0.9 , 4.0.10 , 4.0.11 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.

Feedback submitted, thanks!