Hi everyone,
I'm a total Splunk noob. The title basically says it all. I recently changed the group from enterprise to forwarder. Now I cannot access the GUI. Is there a way I can change it back from the CLI? Also, will this change affect the current operations of the heavy forwarder? Thank you.
Hi mysicksi,
please check if there is a stanza named as:
[license]
active_group = Forwarder
at $Splunk_Home/etc/system/local under server.conf
edit the server.conf , go to license stanza and change to:
[license]
master_uri = https://yourlicenseservername:8089
it can be either FQDN or Ipaddress of the server
active_group = Enterprise
save the changes and start splunk service running /opt/splunk/bin/splunk restart
For further information on server.conf check this document-> https://docs.splunk.com/Documentation/Splunk/8.0.0/Admin/Serverconf#License_manager_settings_for_con...
Is there a limitation on number of installation of Universal forwarder in Hosting environment (Server) assuming i have relevant license available?
Hi mysicksi,
please check if there is a stanza named as:
[license]
active_group = Forwarder
at $Splunk_Home/etc/system/local under server.conf
edit the server.conf , go to license stanza and change to:
[license]
master_uri = https://yourlicenseservername:8089
it can be either FQDN or Ipaddress of the server
active_group = Enterprise
save the changes and start splunk service running /opt/splunk/bin/splunk restart
For further information on server.conf check this document-> https://docs.splunk.com/Documentation/Splunk/8.0.0/Admin/Serverconf#License_manager_settings_for_con...