PreLert (the App) has its own license mechanism. That mechanism is based upon the MAC address of the Search head it is installed and running on. If the App is running across a SHC, you cannot use the same license for each node in the SHC. What do I do?
Collect up the MAC Addresses for each searchhead in the cluster and contact support@prelert.com. They will cut you a license for each node in the cluster. You can, if you want, append all of the licenses together in one large txt file and drop the file on each node.
Collect up the MAC Addresses for each searchhead in the cluster and contact support@prelert.com. They will cut you a license for each node in the cluster. You can, if you want, append all of the licenses together in one large txt file and drop the file on each node.
You can also put the single text file containing all the individual node licenses in the $SPLUNK_HOME/etc/shcluster/apps/prelert/lic directory on your SHC deployer - the file must be called "license". Then when you push from the deployer the overall license file will immediately be on every search head in the cluster.