Splunk® Enterprise

Admin Manual

Download manual as PDF

Splunk version 4.x reached its End of Life on October 1, 2013. Please see the migration information.
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Download topic as PDF

Manage your licenses

This topic discusses managing Splunk licenses. Before you proceed, you may want to review these topics:

For information about upgrading an existing license, see "Migrate to the new Splunk licenser" in the Installation Manual.

Delete a license

If a license expires, you can delete it. To delete one or more licenses:

1. On the license master, navigate to Manager > Licensing.

License delete license.png

2. Click Delete next to the license you want to delete.

3. Click Delete again to confirm.

Note: You cannot delete the last license in a list of licenses on a license master.

View license usage

You can monitor license usage with the deployment monitor app. The license usage page of the deployment monitor shows a wide range of historical information. There's also a license report page page that provides details on daily license usage over a 60 day period.

To learn about the deployment monitor generally, including how to set it up and how to find your way around in it, read "About the deployment monitor" in the Distributed Deployment manual.

License usage page

The license usage page in the deployment monitor contains two charts: one that shows the cumulative MB of data per day by source type, and a histogram that shows MB of data received across selectable criteria, including source type, host, source, indexer, forwarder, and license pool:


License usage charts 3.png


Further down the page, there's detailed information on usage statistics, with separate listings for several criteria, including sourcetype, host, source, indexer, forwarder, and license pool. For example, here's the usage listing by license pool:


License usage stats 3.png


License report page

The license report page provides information on daily license usage. You can use this information to help estimate your license needs.

At the top of the page, there's a usage summary that provides peak and average usage statistics. Next, there's a chart that shows daily volume over the last four weeks. Finally, there's detailed information on daily usage over the last 60 days, ordered by indexer or by license pool. The screenshot below includes just the first several rows.


License report 1.png

PREVIOUS
Add an indexer to a license pool
  NEXT
Swap the license master

This documentation applies to the following versions of Splunk® Enterprise: 4.3, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters