We had a single splunk indexer and search head, we converted that system into an indexer only and added a second indexer and a dedicated search head. The license server resides on the initial indexer and would like to move it to the dedicated search head so I can turn off the web UI on all indexers yet still have access to the license management on the new search head.
What is the best way to move this license off the indexer and over to the search head?
Thanks
I done this once before fairly recently. In my case I expaned from a all-in-one system to two distributed search groups containing one Search and three indexers.
Once the decision has been made for which server would be the licensing master. I would install my license(s) on my Search Head(licensing master), delete the default pool, create new licenseing pools.
After configuring my license master. On each indexer and search instance click changed to slave or designate a different splunk insetance under Manager>> Licensing, changing the current license manager last. Designated the Master license server by ip:port, verifying that each instance has connected to the license master before continuing.
Another options would be to create a app. I've never done any real testing, so I'd recommend preforming this in a lab or test environment.
guid will look something like 85A846D8-2538B-41B1-DB0A-786467DF10E
[lmpool:mygroup]
description = mygroup
quota = 214748364800
slaves = <guid1>,<guid2>,<guid3>
stack_id = enterprise
Hope this helps