Deployment Architecture

Migrate Distributed License Master

jodros
Builder

I have a case open, but I thought I would ask here too, since time is a factor.

We have a distributed environment with several indexers, a searchhead pool for general users, and a standalone searchhead for the security team, and a deployment server. Currently the standalone searchhead is acting as the license master. We need to migrate the license master duties. Could the searchhead pool as as the license master? If not, we could migrate it to the deployment server. I need to know the best way to migrate the license master.

Thanks in advance.

0 Karma

ctapia
New Member

you could use a config manager like puppet/cheff to do it.

0 Karma

sowings
Splunk Employee
Splunk Employee

I'd say use the DS as your new license master. You'll have to distribute out new master_uri settings for the licensed nodes (these are indexers, primarily, but it wouldn't hurt to add the hosts in the SHP as well.

I've done this before where I set the server.conf settings for license in an app that I then ship out via DS. Unfortunately, if your existing indexers have their license::master_uri setting in their $SPLUNK_HOME/etc/system/local/server.conf, the DS app won't work, as system/local is an override. You'll have to remove these entries manually, to allow the DS app's setting to show through.

sowings
Splunk Employee
Splunk Employee

Apply the license to the new LM, redirect clients, when they've all checked in, remove the license from the old LM (easy in Manager -> Licensing).

0 Karma

saurabh_tek11
Communicator

@sowings IMO first we would have to check the number of deployment-client's associated with DS and their phoneHome frequency.
If its less than 50 deployment clients then we can co-host, LM and DS on same box (Since being an LM itself, is heavy duty service as each slave reports every minute). Or our box has to be really good with system resources. If all green, we can go ahead.

0 Karma

jodros
Builder

Thanks for the reply. I forgot to mention a few other key points.

We do have an app for all license slaves. I can easily update that app and push out the changes.

Secondly, the master_uri is a DNS record that we could change the IP and all slaves would link up. We planned to use DNS names instead of IP's for this very reason.

My main concerns are with disabling the license master on the standalone, and enabling it at the new location. Pointing the slaves to the new location should not be an issue.

Thanks

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...

SplunkTrust Application Period is Officially OPEN!

It's that time, folks! The application/nomination period for the 2026-2027 SplunkTrust is officially open. If ...