Skip to main content


Splunk Data Fabric Search

Splunk Data Fabric Search (DFS) is no longer available for purchase as of May 20, 2020. Splunk Enterprise 8.0 customers with term licenses with at least 1 TB daily ingestion capacity may continue to use the free version of Splunk DFS with a number of vCPUs corresponding to their Enterprise license capacity, as described in Table 1 below. Version 1.1 is the final release of Splunk DFS, and version 1.2 is the final release of the accompanying Splunk DFS Manager app. There will be no additional major or minor releases of either product. Splunk DFS 1.1 and the Splunk DFS Manager app 1.2 will be supported until the October 22, 2021 end-of-support date of Splunk DFS 1.1. See the Splunk Software Support Policy for details.

 

A free version of Splunk Data Fabric Search (DFS) is included with Splunk Enterprise 8.0 term licenses with at least 1 TB of daily ingestion capacity. The free version of Splunk DFS is licensed to have access to a number of vCPUs based on the daily ingestion capacity of the corresponding Splunk Enterprise license, as set forth in Table 1 below.

Free vCPUs Daily Ingestion Capacity

0

< 1TB

32

1TB - 2TB

48

2TB - 5TB

64

5TB - 10TB

80

10TB - 20TB

96

20TB - 50TB

112

> 50TB

Table 1: Splunk DFS vCPU entitlement based on Splunk Enterprise 8.0 term license daily ingestion capacity

“vCPUs” refers to the virtual CPUs to which Splunk DFS software has access. Each virtual CPU is equivalent to a distinct hardware thread of execution in a physical CPU core.

Note: The free version of Splunk DFS is only available to customers on a Splunk Enterprise term license. Customers with Splunk Enterprise perpetual licenses are not entitled to use the free version of Splunk DFS.