- Find Answers
- :
- Splunk Administration
- :
- Admin Other
- :
- Installation
- :
- Re: "High Availablity" options for License Server?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
"High Availablity" options for License Server?
Most things in Splunk nowadays seem to be good at scaling outwards - multiple indexers, pooled search heads, etc.
One piece I haven't seen any HA option for is for the License Server/Master.
Right now my disaster-recovery plan in the event of losing the license server is to configure one of the other Splunk nodes as a License Master, and to flip the DNS alias they're all configured with to point to the new box.
However, that's still pretty barebones compared to the automatic nature of Splunk's other components.
Is there an HA option for the license server that I'm not aware of?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Ricapar
like bmacias84 said there is no build in HA option for License Server.
But you can achieve some HA if you setup two VM's as License Master with your License file, then setup a DNS round robin for both License Master and access the License Master over the DNS from all other Splunk Servers.
This way you will always have at least one LM reachable, well as long as your network is up and running 😉
hope this helps, MuS
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Indeed, that was the point. You also risk some troubles if, in the future versions, splunk implements a way to forbid this (there are multiple ways to do this rather easily).
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Wouldn't this technically double your license? Assuming the round robin DNS goes 50/50 more or less.. each license server would only see half of your actual usage.
Splunk (app) might not see it as a violation of your license.. but Splunk (company) might not be thrilled.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Well, actually that depends on your conversation with your sales rep. Go and have a chat with them 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It's not because it's working that it does not violate your license..
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
well speaking for 4.x it works, because this is what I did recently
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Technical I believe that would violate your licensing. You could set up a vm with Fault tolerance if your using VMware. Or set up two licences server behind a load balance with active passive.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Currently there is no HA option for the License Server. It would be nice to have HA for the License Server (maybe a election process if primary is down). I know you do have decent amount of time before you server will complain about violating license usage.
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
