Splunk Enterprise Security

Same Licence over multiple instances

shayvd
New Member

Hi,
We have an enterprise version of Spunk and are running numerous instances of Splunk with LicenceMaster. We have one instance of splunk on an isolated network which is unable to communicate with the LicenceMaster. Are we able to use the same licence number from our other instance of splunk on this isolated instance?

Thanks.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Using the same license in multiple environments would surely violate your license terms.

Either poke a hole in your network to let all indexers communicate with a central license master, or talk to support to get your license split in two smaller licenses.

martin_mueller
SplunkTrust
SplunkTrust

To get definitive statements about license terms you should talk to splunk and your legal team, answers can only give you opinions.

martin_mueller
SplunkTrust
SplunkTrust

Yeah, log throughput is what matters... but if you used the same license in two unconnected environments you'd be going for twice the throughput, violating your terms.

That's why you'll either need a shared license master that totals up all usage from all environments, or a split license to assign parts of your total license to unconnected license masters.

0 Karma

hettervik
Builder

Do you know if Splunk has some sort of policy when it comes to separate test and prod environments? If the environments are totally separated, we would need to separate licenses, or use the same license twice. It is my understanding that some software companies allow this sort of license copy (using the same license in test and prod), but I cant find any specific statements about this in the Splunk license agreement.

0 Karma

shayvd
New Member

Thanks Martin. I was thinking the licencing more more to do with log throughput rather than instances running.

I'll check into your suggestions though.

Thanks.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...