How do I add to Splunk Enterprise Security license?

[gerrydevenney]

I have a 50GB Splunk licence and equivalent 50GB ES licence. I have been asked to install a 25GB ES licence in preparation for new projects that will be using Splunk over the course the following year. The projects will buy their own Splunk licence but the owner of Splunk wants to make sure that the ES licence is installed before this since the owner of the environment is responsible for ES and the projects are not. Firstly how would I upgrade the existing ES licence and secondly is this a proper way to add the ES licence

[Richfez · Accepted solution]

Let's suppose I'm trying to buy a old car. Now, I know that this particular car needs new dice to hang from the mirror because the old dice look a little old and dated. The situation you describe above is as if your wife insists on buying and installing the new dice - a 10 second job - before you've actually bought the car.

A very reasonable solution is to buy the dice - it isn't like you weren't going to put the dice in whatever car you end up buying, right? - and then when you actually take possession of the car, hang them on the rear view mirror.

Similarly, the right way is to just make sure you have the license in your licensing portal, and when you have Splunk licenses to put it on, add both licenses.

[gerrydevenney]

I am reminded of the quote by the Denzel Washington character in the film Philadelphia, "Now, explain it to me like I'm a four-year-old.". But I like your style. It is uncanny how you know my 'wife'

Thanks for the clarification. I was hoping it was going to be as simple as this.

[Richfez]

lol. Sometimes I do this more for my own amusement than anything, but I'm glad you found this useful and less uninteresting than most answers you could have gotten. 🙂

Adding licenses is really simple and fast - I recommend just opening the "license" file from your portal, and copying and pasting in the XML into the "Paste XML" option in the licensing utility. That's just way better - no saving and uploading/finding them again.