Getting Data In

Heavy Forwarder change trial license to forwarder license CLI how to?

fernandoandre
Communicator

How can I change through CLI the license of Heavy Forwarder from enterprise trial license to forwarder license??

This explains how to do it via UI but I don't have UI on this HF.

I have a Heavy Forwarder acting as intermediate between Universal Forwarders and Indexer but is only doing parsing, not indexing, therefore I want to change to Forwarder license.

Thank you in advance

1 Solution

fernandoandre
Communicator

Solved!

I discovered how to do it. Follow this commands:

$ splunk list licenser-groups

   Enterprise
            is_active:0
            stack_ids:

    Forwarder
            is_active:0
            stack_ids:
                    forwarder

    Free
            is_active:0
            stack_ids:
                    free

    Trial
            is_active:1
            stack_ids:
                    download-trial

$ splunk edit licenser-groups Forwarder -is_active 1

$ splunk restart

$ splunk list licenser-groups

    Enterprise
            is_active:0
            stack_ids:

    Forwarder
            is_active:1
            stack_ids:
                    forwarder

    Free
            is_active:0
            stack_ids:
                    free

View solution in original post

fernandoandre
Communicator

Solved!

I discovered how to do it. Follow this commands:

$ splunk list licenser-groups

   Enterprise
            is_active:0
            stack_ids:

    Forwarder
            is_active:0
            stack_ids:
                    forwarder

    Free
            is_active:0
            stack_ids:
                    free

    Trial
            is_active:1
            stack_ids:
                    download-trial

$ splunk edit licenser-groups Forwarder -is_active 1

$ splunk restart

$ splunk list licenser-groups

    Enterprise
            is_active:0
            stack_ids:

    Forwarder
            is_active:1
            stack_ids:
                    forwarder

    Free
            is_active:0
            stack_ids:
                    free
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...