Splunk® Enterprise

Admin Manual

Acrobat logo Download manual as PDF

Splunk Enterprise version 6.x is no longer supported as of October 23, 2019. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Acrobat logo Download topic as PDF

Configure a license master

This topic discusses configuring a Splunk instance as a license master. Before you proceed, you may want to review these topics:

Kinds of license masters

There are two basic styles of license master:

  • Standalone license master
    • If you have a single Splunk indexer and want to manage its licenses, you can run it as its own license master, install one or more Enterprise licenses on it and it will manage itself as a license slave.
    • When you first download and install Splunk Enterprise, it includes a 500 MB 60-day Enterprise Trial license. This instance is automatically configured as a standalone license master, and you cannot create a pool or define any license slaves for this type of license. If you want to create one or more stacks or pools and assign multiple indexers to them, you must purchase and install an Enterprise license. To install a license, follow the instructions in "Install a license" in this manual.
  • Central license master
    • If you have more than one indexer and want to manage their access to purchased license capacity from a central location, configure a central license master and add the indexers to it as license slaves.
    • If the license master is also an indexer, it will be its own license master as well, but Splunk recommends that if you have a search head, you designate it as the license master.
    • If you have a large environment with multiple search heads, you might want to have some or all search heads that are not the license master distribute searches to the license master, for two reasons:
      • You can run searches against the license logs.
      • If an unusual condition occurs on the search head (for example you have a time-limited license and it will expire in 5 days), this condition will be visible on the search head when running a search, as part of the info messages attached to search results.

License master and slave compatibility

A license master must always be of equal or later version than its license slaves.

License master version Compatible license slave versions
6.1.x 5.x, 6.0.x, and 6.1.x
6.2.x 5.x, 6.0.x, 6.1.x, 6.2.x
6.3.x 5.x, 6.0.x, 6.1.x, 6.2.x, 6.3.x
6.4.x 5.x, 6.0.x, 6.1.x, 6.2.x, 6.3.x, 6.4.x

Configure a central license master

By default, a standalone instance of Splunk is its own license master. To configure a central license master, install one or more Enterprise licenses.

Once an Enterprise license is installed, you can create one or more stacks and pools to access the installed license, and manage them from the license master.

Last modified on 09 December, 2016
Groups, stacks, pools, and other terminology
Install a license

This documentation applies to the following versions of Splunk® Enterprise: 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.3.14, 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.4.7, 6.4.8, 6.4.9, 6.4.10, 6.4.11

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters