Monitoring Splunk

Why Search Head are treated as best license manager ?

NaveenkumarFIS
New Member

I'm Confused why Search heads are treated as best license Manager ? And Splunk Recommends configuring Search Head as License master ?

Tags (1)
0 Karma

skalliger
Motivator

Depends on your deployment. I usually take a standalone SH with the Monitoring Console as the Search Head (if the environment is going to be bigger). Why would you want to use an indexer or something else?
Think of a big environment where only a small portion of people have CLI access and you need either to stack licenses or install a new one and can't do it in the UI because the server has no UI or should have no UI enabled (indexers, cluster masters, deployers, forwarders).

There is this in the docs: https://docs.splunk.com/Documentation/Splunk/latest/Deploy/Manageyourdeployment

Skalli

0 Karma
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...