Splunk Enterprise Certified Architect — Question 11
Data for which of the following indexes will count against an ingest-based license?
Answer options
- A. _introspection
- B. summary
- C. _metrics
- D. main
Correct answer: B, D
Explanation
The indexes 'summary' and 'main' are the ones that incur costs against an ingest-based license because they are considered primary data sources. In contrast, '_introspection' and '_metrics' are typically used for monitoring and do not count against the ingest license.