Splunk comparison Free vs. Enterprise
Splunk Free is the totally free version of Splunk. It lets you index up to 500 MB/day and will never expire.
Splunk comparison Free vs. Enterprise : The 500 MB limit is the amount of new data you can add (we call this indexing) per day, but you can keep adding more and more data every day, storing as much as you want. For example, you could add 500 MB of data per day and eventually have 10 TB of data in Splunk.
If you need more than 500 MB/day, you’ll need to purchase a license. See How Splunk licensing works for more information about licensing.
What you don’t have in the Free version :