Does deleting or modifying license pool cause any loss of data?

Path Finder


I have a requirement where I need to add multiple pools for same license stack?
Does editing size of the pool cause any loss of data on indexers?
Does deleting any existing pool cause any loss of data on indexers?

I received below message when I was trying to delete one of the volume.

"Once the pool is deleted, all of the indexers in the pool will lose their shared indexing volumes. Do you still want to delete this pool?

Labels (1)
0 Karma


Hi Saurabh0912,

No, Changing your license pool will not cause any data to be deleted. What you may find, if the new pools are not set up correctly and your groups of indexers start to exceed the volume assigned to them, is that you could see new license exceeded warnings.

Even that message is saying that all of the Indexers in the pool you are deleting, will lose the shared license volumes...not their data volumes.

As long as, at the end of your exercise, every one of your indexers are in license pools that cover the intake volume of them and their license pool brethren, you should be good to go.

0 Karma
Get Updates on the Splunk Community!

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...

Introducing Ingest Actions: Filter, Mask, Route, Repeat

WATCH NOW Ingest Actions (IA) is the best new way to easily filter, mask and route your data in Splunk® ...