Splunk Data Fabric Search

Splunk Data Fabric Search (DFS) is no longer available for purchase as of May 20, 2020. Splunk Enterprise 8.0 customers with term licenses with at least 1 TB daily ingestion capacity may continue to use the free version of Splunk DFS with a number of vCPUs corresponding to their Enterprise license capacity, as described in Table 1 below. Version 1.1 is the final release of Splunk DFS, and version 1.2 is the final release of the accompanying Splunk DFS Manager app. There will be no additional major or minor releases of either product. Splunk DFS 1.1 and the Splunk DFS Manager app 1.2 will be supported until the October 22, 2021 end-of-support date of Splunk DFS 1.1. See the Splunk Software Support Policy for details.

A free version of Splunk Data Fabric Search (DFS) is included with Splunk Enterprise 8.0 term licenses with at least 1 TB of daily ingestion capacity. The free version of Splunk DFS is licensed to have access to a number of vCPUs based on the daily ingestion capacity of the corresponding Splunk Enterprise license, as set forth in Table 1 below.

Free vCPUs	Daily Ingestion Capacity
0	< 1TB
32	1TB - 2TB
48	2TB - 5TB
64	5TB - 10TB
80	10TB - 20TB
96	20TB - 50TB
112	> 50TB

_{Table 1: Splunk DFS vCPU entitlement based on Splunk Enterprise 8.0 term license daily ingestion capacity}

“vCPUs” refers to the virtual CPUs to which Splunk DFS software has access. Each virtual CPU is equivalent to a distinct hardware thread of execution in a physical CPU core.

Note: The free version of Splunk DFS is only available to customers on a Splunk Enterprise term license. Customers with Splunk Enterprise perpetual licenses are not entitled to use the free version of Splunk DFS.