![]() ![]() Limited Use Case: For an end user’s internal security purposes only Maximum Number of Events per 24-hour period measured using Coordinated Universal TimeĮach distinct user account may be used only by a single user at a time. (i.e., simultaneous logins by multiple users leveraging the same user account is disallowed). “ User Seats” means the user accounts created for the Software “ Event” means a single event or grouping of discrete information regarding an event sent to the Software to act on or UBA Capacity Limitations are set forth here. This option is restricted to UBA licenses purchased as an add-on license to Splunk Enterprise Security. “ Number of User Behavior Analytics Monitored Accounts” means the number of user and service accounts in Microsoft Active Directory, Lightweight Directory Access Protocol (LDAP) or any similar service that is used to authenticate users inside the network orĭaily Indexing Volume. Number of User Behavior Analytics Monitored Accounts. Splunk User Behavior Analytics (Splunk UBA) Note: When consumed within Splunk Cloud Platform, SVC is also available. Note: For the avoidance of doubt, data ingested into Splunk Enterprise through Splunk DSP counts against the license capacity of Splunk Enterprise. Number of vCPUs as set forth in the Order Splunk Data Stream Processor (Splunk DSP) Maximum of five (5) Nodes from which data can be sourced to be analyzed and visualized “ Cluster” means a group of Nodes administered by one Hadoop JobTracker or Hadoop Resource Manager. “ Fractional Use of Nodes” means the greater of compute load or applicable storage of the number of Nodes in Cluster(s) for a specific use case or business unit, as identified in an Order. “ Node” means a 64 bit Linux operating system or any other operating system identified in the documentation that runs Hadoop TaskTracker or Node Manager to execute Splunk jobs on Hadoop nodes. Maximum number of Nodes or Fractional Use of Nodes from which data can be sourced to be analyzed and visualized, as identified in the applicable Order (Note: Data in a Node that has already been indexed by Splunk Enterprise (or Splunk Cloud Platform) will not be counted toward the paid volume.) This license is available exclusively from Cisco Systems.Įach Endpoint allows indexing of 10MB/day. This source type restricted license can be stacked on other non-source type restricted licenses. Limited Source Types: This license will allow users to index only Cisco An圜onnect Network Visibility Module (NVM) source type data. Splunk Enterprise for Cisco An圜onnect NVM This license can be combined with other daily indexing volume-based Splunk Enterprise licenses.Īny ingest of these specific source types in excess of the Daily Indexing Volume of this license will be counted against the general ingest license capacity of Splunk Enterprise. any source type containing the string dns) Limited Source Types: This license will allow Customers to index the specified Daily Indexing Volume of DNS, Netflow, and/or public cloud access data in any combination of the following data source types: Note: This limited source-type license is also available for Splunk Enterprise Security and Splunk IT Service Intelligence. Maximum Daily Index Volume permitted: 25GB (regardless of number of Use Cases)ĭeployment type: Limited to a single instance deployment Note: The Rapid Adoption Packages can be purchased in connection with Splunk Cloud Platform as well. “ Use Cases” are defined and listed here: Number of Use Cases identified in the Order Splunk Enterprise Rapid Adoption Packages "Splunk Virtual Compute (SVC)" means a unit of capabilities in Splunk Cloud Platform that includes the following resources: compute, memory and I/O as further explained in the service documentation. Note: For metrics indexing, the Daily Indexing Volume will be calculated by converting each measurement into GB of daily ingestion using a fixed ratio as described in the software documentation.ĭaily Indexing Volume or number of Splunk Virtual Compute (“SVC”) Each virtual CPU is equivalent to a distinct hardware thread of execution in a physical CPU core. ![]() ![]() “ vCPUs” refers to the virtual CPUs to which Software has access. “ Daily Indexing Volume” means the daily aggregate volume of uncompressed data for indexing as set forth in the Order Daily Indexing Volume or number of vCPUs as set forth in the Order ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |