I was wondering if anyone knows how to install the phantom license key through the cli? Or potentially through some rest command. Just started looking into it so maybe there is a straight forward answer documented that I have not found yet but if anyone already knows the answer that would be much appreciated!
The GUI process is straight forward: admin Administration > company settings > license > upload key
I believe the only option at the moment is to upload the license file through the GUI
I never installed the Phantom license previously, thus I assume the process to add the license should be same as the other Splunk Premium apps.
Here is the command to add a license key thought the cli. Make sure you are logged in Master license and the license key is already downloaded to this server.
./ splunk add licenses {path_to_license_file}
I found this document to run the license thought rest api, but I never run this before
check this link please : https://docs.splunk.com/Documentation/Splunk/7.3.2/RESTREF/RESTlicense#licenser.2Flicenses
I am more looking for when running phantom. Meaning, not installed as an app in Splunk. Thanks for the response though.