A customer has installed a 500GB Enterprise license. They also purchased and installed a 300GB, no enforcement license on the same license master. How much data can the customer ingest before the…

The correct answer is D. Search is not locked out. Violations are still recorded. Search is not locked out when a customer has installed a 500GB Enterprise license and a 300GB, no enforcement license on the same license master. The no enforcement license allows the customer to exceed the license quota without locking search, but violations are still…

Splunk License Management

Question

A customer has installed a 500GB Enterprise license. They also purchased and installed a 300GB, no enforcement license on the same license master. How much data can the customer ingest before the search is locked out?

Options

A300GB. After this limit, the search is locked out.
B500GB. After this limit, the search is locked out.
C800GB. After this limit, the search is locked out.
DSearch is not locked out. Violations are still recorded.

How the community answered

(33 responses)

A
3% (1)
C
3% (1)
D
94% (31)

Explanation

Search is not locked out when a customer has installed a 500GB Enterprise license and a 300GB, no enforcement license on the same license master. The no enforcement license allows the customer to exceed the license quota without locking search, but violations are still recorded. The customer can ingest up to 800GB of data per day without violating the license, but if they ingest more than that, they will incur a violation. However, the violation will not lock search, as the no enforcement license overrides the enforcement policy of the Enterprise license. For more information, see [No enforcement licenses] and [License violations] in the Splunk documentation.

Topics

#license management#no enforcement license#license stacking#search lockout

Community Discussion

No community discussion yet for this question.

Full SPLK-2002(205Q) Practice