Database Reference
In-Depth Information
Check the Enable Twitter Input box to start the live Twitter stream
6. This will start the live Twitter stream. Remember that you will need to keep an
eye on the amount of data you let in each day, as the Splunk trial license will only
allow the indexing of 500 MB of data per day. Going beyond this could mean that
you will lose the ability to search your data until the license has been reset or an
Enterprise license is purchased. One way to keep track of the data that you are in-
dexing is to go to the list of indexes:
1. Go to
Settings
.
2. Under
Data
, select
Indexes
.
3. You will see a screen like the one shown here:
The Indexes screen
4. Notice that in the Twitter index (shown in the preceding screenshot), the
event count is 423,465. In this case, each event is a tweet. Also notice
that you can disable an index easily by clicking on
Disable
under
Status
.
Additionally, you can see the path where the Twitter index is stored.
5. Remember that you can only index an additional 500 MB per day in the
free version of Splunk Enterprise, but that you can index up to 500,000
MB in the Total Index. The event count is not limited here, just the
amount of megabytes of data indexed each day.
6. One way to see how much you have used of the 500 MB allowed per day
is to go to
Activity
, then
System Activity
, and under
Serve
, select
Li-
cense Usage
. You will see a dashboard like the one shown in the follow-
ing screenshot, which can tell you how much of the day's licensed index-
ing you have used up. This dashboard shows that I have used 241 MB of
the .5 GB (500 MB) allowed per day:
