Getting Data In

Heavy Forwarder change trial license to forwarder license CLI how to?

fernandoandre
Communicator

How can I change through CLI the license of Heavy Forwarder from enterprise trial license to forwarder license??

This explains how to do it via UI but I don't have UI on this HF.

I have a Heavy Forwarder acting as intermediate between Universal Forwarders and Indexer but is only doing parsing, not indexing, therefore I want to change to Forwarder license.

Thank you in advance

1 Solution

fernandoandre
Communicator

Solved!

I discovered how to do it. Follow this commands:

$ splunk list licenser-groups

   Enterprise
            is_active:0
            stack_ids:

    Forwarder
            is_active:0
            stack_ids:
                    forwarder

    Free
            is_active:0
            stack_ids:
                    free

    Trial
            is_active:1
            stack_ids:
                    download-trial

$ splunk edit licenser-groups Forwarder -is_active 1

$ splunk restart

$ splunk list licenser-groups

    Enterprise
            is_active:0
            stack_ids:

    Forwarder
            is_active:1
            stack_ids:
                    forwarder

    Free
            is_active:0
            stack_ids:
                    free

View solution in original post

fernandoandre
Communicator

Solved!

I discovered how to do it. Follow this commands:

$ splunk list licenser-groups

   Enterprise
            is_active:0
            stack_ids:

    Forwarder
            is_active:0
            stack_ids:
                    forwarder

    Free
            is_active:0
            stack_ids:
                    free

    Trial
            is_active:1
            stack_ids:
                    download-trial

$ splunk edit licenser-groups Forwarder -is_active 1

$ splunk restart

$ splunk list licenser-groups

    Enterprise
            is_active:0
            stack_ids:

    Forwarder
            is_active:1
            stack_ids:
                    forwarder

    Free
            is_active:0
            stack_ids:
                    free
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...