Which of the following types of data count against the license daily quota?
Which of the following types of data count against the license daily quota?
Windows internal logs refer to logs generated by Windows Operating System that are ingested into Splunk. These logs, being external to Splunk, do count towards the license daily quota because any data ingested into Splunk impacts the license usage. On the other hand, replicated data, splunkd logs, and summary index data do not count towards the license quota since they are either internal to Splunk for operational purposes or used to reduce license usage by summarizing data.
Answer is D "Windows internal log" is not a Splunk internal log.
Agreed, even the provided reference in the answer clearly states "only data/log sent to Splunk affect license" and as such Windows, internal logs are external to Splunk and are sent to Splunk
splunkd (ie _internal _metrics, etc) do not count towards license. The correct answer in this question is D. Replicated/Summary does not count. People create a summary index to bypass licence usage at times.
Replicated data don't count towards license. Summary data don't count towards license. Internal logs don't count towards license. so maybe D?
Sys Admin Pdf pg 46. Ans is D
Sorry answer is B
The answer is D, please read through the provided Splunk URL reference https://docs.splunk.com/Documentation/Splunk/8.0.3/Admin/Distdeploylicenses#Clustered_deployments_and_licensing_issues
Answer is A
The answer is D, please read through the provided Splunk URL reference https://docs.splunk.com/Documentation/Splunk/8.0.3/Admin/Distdeploylicenses#Clustered_deployments_and_licensing_issues