Security

Is license required for Job server ??

rakesh_498115
Motivator

Hi All,

I have a multi site indexer clustering configuration and has a separate license master, Now all indexer cluster servers are point to the license master as slaves to it.

I also have the Job servers to run the search jobs from this indexer cluster servers , do i need to use license configuration on these servers as well ? or its not required ?? . i was trying to find the documentation for the same but couldnt find till now..if anyone could help me..tht would be great.. !!

thanks
rakesh.

Tags (1)
0 Karma

puneethgowda
Communicator
0 Karma

woodcock
Esteemed Legend

Not required. You only need a license server for a node that is indexing (and Summary Indexing doesn't count).

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi rakesh_498115,
why you don't use the same license master of indexers?
Search Heads don't index any log (usually they send their logs to indexes) so they don't give any additional load on the License Master, but they need to have the license otherwise, after the trial period, you loose some functionalities (like login or alarms).

Bye.
Giuseppe

0 Karma

rakesh_498115
Motivator

Hi Cusello,

Currently i am planning to move the license to other servers , So in this process i was trying to best possible way to move it and accordingly add the same to the Job servers as well.

My thought process of moving is here -

Install the new license in the new server.
remove the search peers from the current license pool one by one and make them to point to the new license server.
Add jobservers as well to the new license server.
Now remove old license from the existing pool and add it to the new the license server.

thanks,
Rakesh.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi rakesh_498115,
your process seems to be correct.
Bye.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...