Splunk comparison Free vs. Enterprise
Splunk Free is the totally free version of Splunk. It lets you index up to 500 MB/day and will never expire.
Splunk comparison Free vs. Enterprise : The 500 MB limit is the amount of new data you can add (we call this indexing) per day, but you can keep adding more and more data every day, storing as much as you want. For example, you could add 500 MB of data per day and eventually have 10 TB of data in Splunk.
If you need more than 500 MB/day, you’ll need to purchase a license. See How Splunk licensing works for more information about licensing.
What you don’t have in the Free version :
Search across multiple Splunk deployments; supports load balancing and failover
Monitoring & Alerting
Monitor and alert for individual and correlated real-time events
Event pattern detection
Automatically discovers patterns in your data with a single click
High Performance Analytics Store
High performance analytics technology
Transparent data summarization technology
Scheduled and automated PDF generation and delivery of reports and dashboards
Access Control and Single Sign-On
Integrated role-based access control and user authentication with LDAP directory and single sign-on integration
Distributed Management Console
Centrally manage the health and performance of distributed Splunk deployments
High availability architecture for disaster recovery in a multi-site deployment