I looked at this. Apparently there is “Splunk Light” and there is “Splunk Free”. In our webinar and instructions we used Splunk Free. Splunk Free happens two ways:
- Splunk Enterprise Trial expires and turns in to a Splunk Free license.
- Before the Enterprise Trial expires you change Splunk’s license settings to a Free License.
With Splunk Free you lose some Enterprise features but it doesn’t affect what we demonstrated in the webinar and will continue to work with Supercharger.
Splunk Light is separate Splunk product with limited functionality. Imre will be able to clarify but it looks likes only a handful of Splunk apps are available with Light.
Both versions index 500MB a day.
I’ll get our documented steps updated to specify Splunk Free instead of Splunk Light.