noun, verb

A collection of licenses whose individual licensing volume amounts have been aggregated to serve as a single unified amount of indexing volume,or a stack. The act of aggregating the license volumes into a single amount of volume is called "stacking" the licenses. License pools can be created from license stacks.

Certain types of Splunk licenses support stacking. Currently, only Enterprise and Enterprise Sales Trial licenses can be stacked together. Enterprise Trial licenses and Splunk Free licenses cannot be stacked.

Stacking is supported in Splunk 4.2 and later.

For more information

In the Admin Manual:


configuration file

event processing

character set encoding




timestamp, timezone offset

default field extraction

host, source, source type, punct


retention time