Getting Data In

do i need a different license to install splunkforwarder?

just4me
Engager

do i need a different license to install splunkforwarder if i already have an enterprise license for splunk? also installing splunk forwarder seems like a separate instance that i have to install on my server? is that correct

Tags (2)

piebob
Splunk Employee
Splunk Employee

documentation for forwarder licenses is here:
http://docs.splunk.com/Documentation/Splunk/5.0/Admin/TypesofSplunklicenses#Forwarder_license

the tl;ldr answer is: no. if you're installing a universal forwarder, it will not be indexing any data, so you don't need to install a separate license on it (it comes with its own separate license pre-installed and enabled).

the universal forwarder is a separate package and should be installed as needed on the system(s) from which you want to forward data. review this topic and others about forwarding:
http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Aboutforwardingandreceivingdata

piebob
Splunk Employee
Splunk Employee

if you are going to be indexing data on that forwarder, you do not need a separate license, but you will need to add it as a slave to your license master and give it access to the enterprise license stack per the docs link i provided above.

just4me
Engager

i'm planning on installing heavy fowarder as we need the indexing feature of the heavy indexer.
do i need another liecense in this case?

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...