After how many warnings within a rolling 30-day period will a license violation occur with an enforced Enterprise license?
After how many warnings within a rolling 30-day period will a license violation occur with an enforced Enterprise license?
A license violation will occur after 5 warnings within a rolling 30-day period with an enforced Enterprise license. This is based on documentation indicating that for Enterprise Trial, Dev/Test, and Developer licenses, five or more warnings within this period will result in a violation.
D is correct for Splunk 8.0 and older. Since 8.1, 45 license warnings in a rolling 60 day period cause violation.
For licenses of 100GB or less
Agreed D. Quoting the Splunk reference URL, https://docs.splunk.com/Documentation/Splunk/8.0.5/Admin/Aboutlicenseviolations "Enterprise Trial license. If you get five or more warnings in a rolling 30 days period, you are in violation of your license. Dev/Test license. If you generate five or more warnings in a rolling 30-day period, you are in violation of your license. Developer license. If you generate five or more warnings in a rolling 30-day period, you are in violation of your license. BUT for Free license. If you get three or more warnings in a rolling 30 days period, you are in violation of your license."
for the new version the violation may be different as per the following link yet for the trail license it is 5 days out of 30. For the stack license it is 45 times in 60 days but that is not included in the answer and that tells me this question is old for the old licenses. https://docs.splunk.com/Documentation/Splunk/8.1.2/Admin/Aboutlicenseviolations