Deployment Architecture

Migrate Distributed License Master

jodros
Builder

I have a case open, but I thought I would ask here too, since time is a factor.

We have a distributed environment with several indexers, a searchhead pool for general users, and a standalone searchhead for the security team, and a deployment server. Currently the standalone searchhead is acting as the license master. We need to migrate the license master duties. Could the searchhead pool as as the license master? If not, we could migrate it to the deployment server. I need to know the best way to migrate the license master.

Thanks in advance.

0 Karma

ctapia
New Member

you could use a config manager like puppet/cheff to do it.

0 Karma

sowings
Splunk Employee
Splunk Employee

I'd say use the DS as your new license master. You'll have to distribute out new master_uri settings for the licensed nodes (these are indexers, primarily, but it wouldn't hurt to add the hosts in the SHP as well.

I've done this before where I set the server.conf settings for license in an app that I then ship out via DS. Unfortunately, if your existing indexers have their license::master_uri setting in their $SPLUNK_HOME/etc/system/local/server.conf, the DS app won't work, as system/local is an override. You'll have to remove these entries manually, to allow the DS app's setting to show through.

sowings
Splunk Employee
Splunk Employee

Apply the license to the new LM, redirect clients, when they've all checked in, remove the license from the old LM (easy in Manager -> Licensing).

0 Karma

saurabh_tek11
Communicator

@sowings IMO first we would have to check the number of deployment-client's associated with DS and their phoneHome frequency.
If its less than 50 deployment clients then we can co-host, LM and DS on same box (Since being an LM itself, is heavy duty service as each slave reports every minute). Or our box has to be really good with system resources. If all green, we can go ahead.

0 Karma

jodros
Builder

Thanks for the reply. I forgot to mention a few other key points.

We do have an app for all license slaves. I can easily update that app and push out the changes.

Secondly, the master_uri is a DNS record that we could change the IP and all slaves would link up. We planned to use DNS names instead of IP's for this very reason.

My main concerns are with disabling the license master on the standalone, and enabling it at the new location. Pointing the slaves to the new location should not be an issue.

Thanks

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Cisco Data Fabric from Architecture to Investigation, Better SOC Visibility, and More ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

The Trust Gap: Why a Data Foundation is Fundamental to an Agentic Enterprise

The Trust Gap: Why a data foundation is fundamental to an  Agentic Enterprise.   Agentic AI is transforming ...

Data Management Digest – September 2026

    Welcome to the September 2026 edition of Data Management Digest! September brought a fresh wave of ...