Splunk Enterprise

Can Splunk Light be converted to a heavy forwarder?

Explorer

Before we purchased an Enterprise license, we had an installation of Splunk Light running collecting a smallish amount of data. We've turned up an Enterprise search head, with a couple of indexers and we're just now circling back to this initial installation we had of Light. Is it possible to take it that Light installation that is still humming along, and turn it into a heavy forwarder for our new Enterprise solution or would it be best to just scrap that install, and rebuild it anew as strictly a forwarder?

Splunk Employee
Splunk Employee

As rbittner says above:

You have to convert your SL instance to an Enterprise instance. Installing SE on top of SL will work. The SE trial license will trump the SL license. Once you have your instance running as SE point it to the master license server.

0 Karma

SplunkTrust
SplunkTrust

You should be able to just upgrade that instance to SPlunk Enterprise instance (and setup that as HF). It should be easy as per the Splunk Light page http://www.splunk.com/en_us/products/splunk-light.html

0 Karma

Explorer

Sadly I get dead-ended at this page:

http://docs.splunk.com/Documentation/SplunkLight/6.3.0/Installation/AboutmigratingSplunkLight

It says that yes it's a valid migration path, but nothing more on /how/ to fulfill that migration.. I would it might be as simple as just applying a license, but Light doesn't appear to allow me to point it to a remote master license server..

0 Karma

SplunkTrust
SplunkTrust

You should just install Splunk Enterprise on top of your Splunk Light installation. After that you will get all the options, including remote license master configuration.

0 Karma

Splunk Employee
Splunk Employee

You have to convert your SL instance to an Enterprise instance. Installing SE on top of SL will work. The SE trial license will trump the SL license. Once you have your instance running as SE point it to the master license server.