licensing in a distributed deployment

[brettcave]

we've recently migrated to a distributed deployment, with a licensing server. a recent surge in events caused licensing to be exceeded, and we received a reset license which was installed on the license master. however, we still cant search on the shc due to licensing errors.

after installing a license on the master, what is needed to enable searching across the cluster?

[isoutamo]

Hi

You must point all your servers to use that same license master. More info how to do it can found from here: https://docs.splunk.com/Documentation/Splunk/8.0.1/Admin/Distdeploylicenses.

In some cases there have been an issue with old perpetual licenses and then you should create a case to Splunk support.

R. Ismo

[codebuilder]

You need to configure your search heads to be license slaves, and point them to the license master.

Settings > Licensing > Change to Slave > Designate a different Splunk instance as the master license server

[codebuilder]

You'll need to do the same for your indexers btw, if you haven't already.

[codebuilder]

Did this help you resolve your issue? if so, please "accept" the answer so that others in the community may benefit.