Considering that the deployment server, Search Heads, Universal Forwarder and Deployers are full Splunk Enterprise Installs, how does the licensing work ?
I know that indexer licenses are based upon the data ingestion, so what are search head, Deployer, Deployment Server and Heavy Forwarder licenses based on ?
All those are used only feature part of license not ingesting part. You should use central license server to share license to all of your splunk enterprise nodes.
You could found more here: https://docs.splunk.com/Documentation/Splunk/8.2.0/Admin/TypesofSplunklicenses
View solution in original post