How do I get a free license?

[matt]

I'd like a use the free license, what do I need to do?

[chicodeme]

add to server.conf seems like a solution.. if using a forwarder.

[license]
active_group = Forwarder

[yannK]

In 4.2 to switch to free license:

• login the UI, go to manager > licensing
• change the license group to "free license"
• restart

[chicodeme]

Anyway at cmdline to change it? especially when using LWF/forwarders and gui is not running?

[matt · Accepted solution]

Version 4 support of the free license was introduced in version 4.0.5. Splunk Free is designed for personal, ad-hoc search and visualization of IT data. You can use Splunk Free for ongoing indexing of small volumes (<500MB/day) of data.

If you go over 500MB/day more than 3 times in a 30 day period, Splunk will continue to index your data, but search will be disabled until you are back down to 3 or fewer times in the 30 day period.

To switch to a Free License via the web interface:

• Log in to Splunk Web as a user with admin privileges and navigate to Manager > License.
• Review the text below the License and usage area, find the switch to a free license link, and click it. A login page is displayed.
• Select Switch to Free License and click Continue.
• You are prompted to reboot.

To switch to a Free License via the command line:

• Copy the $SPLUNK_HOME/etc/splunk-free.license to $SPLUNK_HOME/etc/splunk.license
• Restart Splunk (./splunk restart)

[benstraw]

see also:
http://answers.splunk.com/questions/84/how-do-i-make-my-splunk-a-free-splunk