I am using the splunk docker image to start a heavy forwarder with this command:
docker run -d -p 8000:8000 -e "SPLUNK_START_ARGS=--accept-license" -e "SPLUNK_PASSWORD=mydummypw" -e "SPLUNK_ROLE=splunk_heavy_forwarder" --name hforwarder splunk/splunk:latest
I would like this heavy forwarder to run with the forwarder license, but when I check with
splunk list licenser-groups
I see that a Trial license is selected instead or the Forwarder one:
I could of course connect to the container and switch the license group with
splunk edit licenser-groups Forwarder -is_active 1
but this requires a restart and I would like to achieve this with only parameters to the docker run command.
Any idea if this is possible ?
If I add the SPLUNK_LICENSE_MASTER_URL parameter to make my heavy forwarder a slave to a license server, it works, but I am looking for a way to use the Forwarder license instead.
Got around it with
docker run -d -p 8000:8000 -e "SPLUNK_START_ARGS=--accept-license" -e "SPLUNK_PASSWORD=mydummypw" -e "SPLUNK_ROLE=splunk_heavy_forwarder" -e "SPLUNK_BEFORE_START_CMD=edit licenser-groups Forwarder -is_active 1" --name hforwarder splunk/splunk:latest
I didn't know this SPLUNK_BEFORE_START_CMD environment variable existed.
View solution in original post