Splunk ITSI

ITSI License and "Is CM Indexer Discovery concept better or directly sending data to Indexer cluster"?

AnilPujar
Path Finder

I have few forwarders which send data directly to Indexer cluster and few forwarders which send through CM Indexer Discovery.

and my LM and CM is same, I need to restart LM which means CM as well for my current Splunk Architecture.

Reason to restart: as after adding ITSI License in LM, still getting error in SH cluster that don't have valid license. So thinking restart of LM might reflect ITSI License.

As the same license have not given any issue in standalone test server.

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...