All Apps and Add-ons

How does the PreLert App's Custom License mechanism work in a Search head Clustering Environment?

dcroteau
Splunk Employee
Splunk Employee

PreLert (the App) has its own license mechanism. That mechanism is based upon the MAC address of the Search head it is installed and running on. If the App is running across a SHC, you cannot use the same license for each node in the SHC. What do I do?

1 Solution

dcroteau
Splunk Employee
Splunk Employee

Collect up the MAC Addresses for each searchhead in the cluster and contact support@prelert.com. They will cut you a license for each node in the cluster. You can, if you want, append all of the licenses together in one large txt file and drop the file on each node.

View solution in original post

dcroteau
Splunk Employee
Splunk Employee

Collect up the MAC Addresses for each searchhead in the cluster and contact support@prelert.com. They will cut you a license for each node in the cluster. You can, if you want, append all of the licenses together in one large txt file and drop the file on each node.

dmr195
Communicator

You can also put the single text file containing all the individual node licenses in the $SPLUNK_HOME/etc/shcluster/apps/prelert/lic directory on your SHC deployer - the file must be called "license". Then when you push from the deployer the overall license file will immediately be on every search head in the cluster.

0 Karma
Get Updates on the Splunk Community!

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Community Feedback

We Want to Hear from You! Share Your Feedback on the Splunk Community   The Splunk Community is built for you ...

Manual Instrumentation with Splunk Observability Cloud: Implementing the ...

In our observability journey so far, we've built comprehensive instrumentation for our Worms in Space ...