Getting Data In

Heavy Forwarder change trial license to forwarder license CLI how to?

fernandoandre
Communicator

How can I change through CLI the license of Heavy Forwarder from enterprise trial license to forwarder license??

This explains how to do it via UI but I don't have UI on this HF.

I have a Heavy Forwarder acting as intermediate between Universal Forwarders and Indexer but is only doing parsing, not indexing, therefore I want to change to Forwarder license.

Thank you in advance

1 Solution

fernandoandre
Communicator

Solved!

I discovered how to do it. Follow this commands:

$ splunk list licenser-groups

   Enterprise
            is_active:0
            stack_ids:

    Forwarder
            is_active:0
            stack_ids:
                    forwarder

    Free
            is_active:0
            stack_ids:
                    free

    Trial
            is_active:1
            stack_ids:
                    download-trial

$ splunk edit licenser-groups Forwarder -is_active 1

$ splunk restart

$ splunk list licenser-groups

    Enterprise
            is_active:0
            stack_ids:

    Forwarder
            is_active:1
            stack_ids:
                    forwarder

    Free
            is_active:0
            stack_ids:
                    free

View solution in original post

fernandoandre
Communicator

Solved!

I discovered how to do it. Follow this commands:

$ splunk list licenser-groups

   Enterprise
            is_active:0
            stack_ids:

    Forwarder
            is_active:0
            stack_ids:
                    forwarder

    Free
            is_active:0
            stack_ids:
                    free

    Trial
            is_active:1
            stack_ids:
                    download-trial

$ splunk edit licenser-groups Forwarder -is_active 1

$ splunk restart

$ splunk list licenser-groups

    Enterprise
            is_active:0
            stack_ids:

    Forwarder
            is_active:1
            stack_ids:
                    forwarder

    Free
            is_active:0
            stack_ids:
                    free
Get Updates on the Splunk Community!

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...