topic what license for my 4.2 forwarder ? in Getting Data In

what license for my 4.2 forwarder ?

mataharry — Wed, 23 Mar 2011 01:43:48 GMT

I installed 4.2 splunk, and made it a forwarder (not lightweight or universal forwarder) Because I want to do some filtering on it before sending to the indexer.

But I got license errors. I looked for the $SPLUNK_HOME/splunk-forwarder.license as I used to do on 4.1. But i only found a trial license !!!

where is my forwarder license ?

Re: what license for my 4.2 forwarder ?

jbsplunk — Wed, 23 Mar 2011 02:49:39 GMT

Is any indexing taking place on the full forwarder? If so, you'll need to have access to an enterprise license stack.

Re: what license for my 4.2 forwarder ?

yannK — Wed, 23 Mar 2011 02:50:53 GMT

On 4.2 the easiest method to change the license group to the forwarder license group. There is no splunk-forwarder.license file in $SPLUNK_HOME/etc/ anymore.

see here http://www.splunk.com/base/Documentation/latest/Admin/TypesofSplunklicenses#Forwarder_license

Using the UI : You have to go to the web UI, manager > Licensing > change license group to forwarder license. Do that for your forwarders and dedicated deployment servers.

important remarks :

there is not yet a method to do it from the CLI on 4.2.0, it will be possible in 4.2.1.
you cannot do that anymore for the 4.2 search-heads, you need to add them as slave of your indexer license pool.

Another more complex method is to create a license pool for the forwarders or search-heads.

on the manager on the indexer/license server
create a license pool with 1MB/day (taken from the real license)
to simplify make this pool the default for new slave servers (your forwarders)
on the forwarder, go to the manager>license and make it a slave of the indexer/license server (default is yourindexerip:8089 )

Re: what license for my 4.2 forwarder ?

yannK — Thu, 24 Mar 2011 23:25:37 GMT

Even if there is no indexing on the full forwarder, you will have to add it to a license pool (no more splunk-forwarder.license included in the new installer)

Re: what license for my 4.2 forwarder ?

MuS — Thu, 26 May 2011 11:59:51 GMT

Hi Guys

since 4.2.1 is out now, what would be the CLI command to change the license? And what if your not using a license master at all?

Re: what license for my 4.2 forwarder ?

MuS — Tue, 14 Jun 2011 08:46:37 GMT

Hi guys

just as addition to this topic:
I tried to setup a heavy forwarder by script and encountered the problem to change/activate the license by script. after a small chat with yannK I found this solution, just add the following to your servers.conf and your done:

[license]

active_group = Forwarder

kudos go to yannK 😉

Re: what license for my 4.2 forwarder ?

chicodeme — Wed, 07 Sep 2011 15:52:48 GMT

4.2.3 is out.. what is cmdline option?

Re: what license for my 4.2 forwarder ?

chicodeme — Wed, 07 Sep 2011 15:56:28 GMT

worked for me on 4.2.2 ... added to splunklightforwarder app that is deployed out..