If I move license masters, will I lose historical license data?

[vanderaj2]

Hello,

I'm considering moving my license master from one server to another. If I do that, will I lose past historical data on license usage (i.e. prior 30 days metrics on license usage)?

Thanks!

[gjanders]

Assuming you are forwarding your license master data to the indexing tier, there will be no loss of licensing information as all the data will exist in the indexer(s)

You can run searches to show licensing information on any search head FYI, you just need to know to use the correct search syntax.

[esix_splunk · Accepted solution]

As long as you have a distributed environment, e.g., Clustered with proper replication, your logging metrics are all stored in the _internal index. This also assumes that you have a long retention set on this index...

In that case, you can search against it from any search peer that is connected to the indexing cluster / tier..

[vanderaj2]

Perfect! Thanks All.....I appreciate you guys weighing in on this. Indeed, we are pushing all the _internal logs down to the indexing cluster (which all of the elements in our distributed environment can search).