We are installing Splunk Universal Forwarders using Tanium (system configuration tool) as one time deployment. In parallel, we are setting up Deployment Server (which will have end-points as deployment clients) to use 'Forwarder Management' module and control Splunk configuration files at end-points.
However, this deployment server does not have connection to Splunk license master which is hosted externally and with other Splunk components.
What license will work at this standalone deployment server without any connection to Splunk license master? Can we use Enterprise Trial version or Forwarding license or Non-production license?
Do we know if any of these two options are possible:
a. Getting non-prod license from Splunk to be used for Deployment server,
b. Getting a cut of zero-byte license from Enterprise license key for deployment server, so that the enterprise features are enabled but no indexing can be done locally.
Thank you for the response. As we can not use License master connection in our scenario. Does Splunk Enterprise License suffice our requirements or any other way which helps?
The best option would be to make Deployment Server as a license slave and connect to the license master. If it's not possible try with Forwarding License.
Use of Trial version is inappropriate for Production system.