Installation

Is there a way to update the slave_name when connecting to the license master?

djfang
Explorer

Hi,

I'm wondering if there's a way to update the slave_name when connecting to the license master. My slave_name is the same across all my imaged indexers as I am trying to deploy them in my test environment. The identical slave_name is causing my license master usage report to only report one of the slaves.

Thanks in advance for any pointers.

Cheers!

Labels (1)
0 Karma
1 Solution

djfang
Explorer

I realized that the problem causing this was the GUID setting under /opt/splunk/etc/instance.cfg
It was using the same GUID as the other slaves (due to direct image copy of instances with splunk preinstalled).
All I had to do was to remove the guid and restart Splunk. It will autogenerate with a new GUID. Then connections to the Splunk license master will be seen as one.

In instance.cfg

[general]
guid =

View solution in original post

djfang
Explorer

I realized that the problem causing this was the GUID setting under /opt/splunk/etc/instance.cfg
It was using the same GUID as the other slaves (due to direct image copy of instances with splunk preinstalled).
All I had to do was to remove the guid and restart Splunk. It will autogenerate with a new GUID. Then connections to the Splunk license master will be seen as one.

In instance.cfg

[general]
guid =

lguinn2
Legend

The "slave name" is actually the Splunk server name from server.conf
You really should update server.conf, so that not all of your test servers have the same name...

AFIAK, you cannot do this on the license master. It should be done on each of the license slaves. This will also make other reports and tools (like the Distributed Management Console) work better.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...