Manage your licenses
Manage your licenses
This topic discusses managing Splunk licenses. Before you proceed, you may want to review these topics:
- Read "How Splunk licensing works" in this manual for an introduction to Splunk licensing.
- Read "Groups, stacks, pools, and other terminology" in this manual for more information about Splunk license terms.
- Read "Manage licenses from the CLI" in this manual for help with performing some of these tasks from the command line.
Delete a license
If a license expires, you can delete it. To delete one or more licenses:
1. On the license master, navigate to Manager > Licensing.
2. Click Delete next to the license you want to delete.
3. Click Delete again to confirm.
Note: You cannot delete the last license in a list of licenses on a license master.
View license usage
You can monitor license usage with the deployment monitor app. The license usage page of the deployment monitor shows a wide range of historical information. There's also a license report page page that provides details on daily license usage over a 60 day period.
To learn about the deployment monitor generally, including how to set it up and how to find your way around in it, read "About the deployment monitor" in the Distributed Deployment manual.
License usage page
The license usage page in the deployment monitor contains two charts: one that shows the cumulative MB of data per day by source type, and a histogram that shows MB of data received across selectable criteria, including source type, host, source, indexer, forwarder, and license pool:
Further down the page, there's detailed information on usage statistics, with separate listings for several criteria, including sourcetype, host, source, indexer, forwarder, and license pool. For example, here's the usage listing by license pool:
License report page
The license report page provides information on daily license usage. You can use this information to help estimate your license needs.
At the top of the page, there's a usage summary that provides peak and average usage statistics. Next, there's a chart that shows daily volume over the last four weeks. Finally, there's detailed information on daily usage over the last 60 days, ordered by indexer or by license pool. The screenshot below includes just the first several rows.
This documentation applies to the following versions of Splunk: 4.2.2 , 4.2.3 , 4.2.4 , 4.2.5 , 4.3 , 4.3.1 , 4.3.2 View the Article History for its revisions.