Splunk Enterprise

Can Splunk Light be converted to a heavy forwarder?

smithpj
Explorer

Before we purchased an Enterprise license, we had an installation of Splunk Light running collecting a smallish amount of data. We've turned up an Enterprise search head, with a couple of indexers and we're just now circling back to this initial installation we had of Light. Is it possible to take it that Light installation that is still humming along, and turn it into a heavy forwarder for our new Enterprise solution or would it be best to just scrap that install, and rebuild it anew as strictly a forwarder?

jterry
Splunk Employee
Splunk Employee

As rbittner says above:

You have to convert your SL instance to an Enterprise instance. Installing SE on top of SL will work. The SE trial license will trump the SL license. Once you have your instance running as SE point it to the master license server.

0 Karma

somesoni2
Revered Legend

You should be able to just upgrade that instance to SPlunk Enterprise instance (and setup that as HF). It should be easy as per the Splunk Light page http://www.splunk.com/en_us/products/splunk-light.html

0 Karma

smithpj
Explorer

Sadly I get dead-ended at this page:

http://docs.splunk.com/Documentation/SplunkLight/6.3.0/Installation/AboutmigratingSplunkLight

It says that yes it's a valid migration path, but nothing more on /how/ to fulfill that migration.. I would it might be as simple as just applying a license, but Light doesn't appear to allow me to point it to a remote master license server..

0 Karma

somesoni2
Revered Legend

You should just install Splunk Enterprise on top of your Splunk Light installation. After that you will get all the options, including remote license master configuration.

0 Karma

rbittner_splunk
Splunk Employee
Splunk Employee

You have to convert your SL instance to an Enterprise instance. Installing SE on top of SL will work. The SE trial license will trump the SL license. Once you have your instance running as SE point it to the master license server.

Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...