license violation

[pankajupadhyay]

We have Splunk Enterprise no enforcement license of 50Gb and we have two standalone indexer.

I wanna know will that license of 50gb for each indexer or combine?

according to me 50gb license would be sum of each indexer utilization not individual 50gb.

Please clarify.

[gcusello]

Hi @pankajupadhyay,

are the two servers configured with their own licenses or one as License Master and one as License Slave?

if they have their own license (not the same!) you have 50+50 GB/day.

If they are License Master and License Slave, you have only 50 GB/day.

If you are using the same license in both the servers you're in violation!

Ciao.

Giuseppe

[pankajupadhyay]

@gcusello  Hi  I have checked on each indexer and its stating as Master server.

Is that mean both individual indexer 50gb each ??

auto_generated_pool_enterprise----Pool name but in that pool other indexer is not called into it.

[gcusello]

Hi @pankajupadhyay,

Yes, if you have only one license, you have to configure one as Master and one as Slave.

Ciao.

Giuseppe