All Apps and Add-ons

How do I match Licence Hash to Licence GUID?

scodenton
Engager

Hello,

I can find my Enterprise licence GUID in https://splunkcommunities.force.com, but when I look in my Splunk instance at Settings -> Licensing -> All licence details, all I can see is a licence Hash.

Does anyone know how I can relate the two so that I can finally work out which Splunk instance is using what licence please? This is a situation I have inherited from previous dev teams and so I don't have the full history of what was done when with what licence.

We don't have a complex setup, no forwarders or slaves, etc.

Any help would be much appreciated.

0 Karma
1 Solution

Azeemering
Builder

Allright, there is a naughty exploit that you can use for this.

http://yourinstance:8000/en-US/splunkd/__raw/services/server/info/server-info?output_mode=json
This output contains your GUID and LicenseKey and LicenseSignature.

Does this help you?

View solution in original post

coreybfoulds
New Member

There is an api call that gives you this information in a more standard way.

https://yourinstance:8089/services/licenser/localslave

This will give you the guid, license hash, and you can tell if the server is a license manager or not by comparing the master_guid and slave_id fields. If they are the same, you are talking to your license manager, and if they are different, you are dealing with a server with a license managed by another server.

For license managers, you can call:

https://yourinstance:8089/services/licenser/licenses

This will give expiration and start date info for all licenses that come with that server. Slave servers will not have any of this information here.

0 Karma

Azeemering
Builder

Allright, there is a naughty exploit that you can use for this.

http://yourinstance:8000/en-US/splunkd/__raw/services/server/info/server-info?output_mode=json
This output contains your GUID and LicenseKey and LicenseSignature.

Does this help you?

scodenton
Engager

Yes it did help - many thanks indeed!

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...