topic Re: licensing in a distributed deployment in Deployment Architecture

licensing in a distributed deployment

brettcave — Fri, 14 Feb 2020 20:46:47 GMT

we've recently migrated to a distributed deployment, with a licensing server. a recent surge in events caused licensing to be exceeded, and we received a reset license which was installed on the license master. however, we still cant search on the shc due to licensing errors.

after installing a license on the master, what is needed to enable searching across the cluster?

Re: licensing in a distributed deployment

codebuilder — Fri, 14 Feb 2020 21:29:34 GMT

You need to configure your search heads to be license slaves, and point them to the license master.

Settings > Licensing > Change to Slave > Designate a different Splunk instance as the master license server

Re: licensing in a distributed deployment

codebuilder — Fri, 14 Feb 2020 21:31:12 GMT

You'll need to do the same for your indexers btw, if you haven't already.

Re: licensing in a distributed deployment

isoutamo — Fri, 14 Feb 2020 21:31:58 GMT

You must point all your servers to use that same license master. More info how to do it can found from here: https://docs.splunk.com/Documentation/Splunk/8.0.1/Admin/Distdeploylicenses.

In some cases there have been an issue with old perpetual licenses and then you should create a case to Splunk support.

R. Ismo

Re: licensing in a distributed deployment

codebuilder — Mon, 16 Mar 2020 22:27:44 GMT

Did this help you resolve your issue? if so, please "accept" the answer so that others in the community may benefit.