Installation

If I move license masters, will I lose historical license data?

vanderaj2
Path Finder

Hello,

I'm considering moving my license master from one server to another. If I do that, will I lose past historical data on license usage (i.e. prior 30 days metrics on license usage)?

Thanks!

Labels (1)
0 Karma
1 Solution

esix_splunk
Splunk Employee
Splunk Employee

As long as you have a distributed environment, e.g., Clustered with proper replication, your logging metrics are all stored in the _internal index. This also assumes that you have a long retention set on this index...

In that case, you can search against it from any search peer that is connected to the indexing cluster / tier..

View solution in original post

vanderaj2
Path Finder

Perfect! Thanks All.....I appreciate you guys weighing in on this. Indeed, we are pushing all the _internal logs down to the indexing cluster (which all of the elements in our distributed environment can search).

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

As long as you have a distributed environment, e.g., Clustered with proper replication, your logging metrics are all stored in the _internal index. This also assumes that you have a long retention set on this index...

In that case, you can search against it from any search peer that is connected to the indexing cluster / tier..

gjanders
SplunkTrust
SplunkTrust

Assuming you are forwarding your license master data to the indexing tier, there will be no loss of licensing information as all the data will exist in the indexer(s)

You can run searches to show licensing information on any search head FYI, you just need to know to use the correct search syntax.

Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...