Saved Bookmarks
| 1. |
What is the importance of License Master in Splunk? If the License Master is not reachable, what will happen? |
|
Answer» It is the responsibility of the license MASTER in Splunk to ensure that the limited amount of data is indexed. Since each Splunk license is based on the amount of data that is COMING into the platform in 24 hours, it is essential to keep the environment within the limits of its purchased volume. Whenever the license master becomes unavailable, it is simply impossible to search the data. Therefore, only searching remains halted while the indexing of data continues. Data entering the Indexer won't be impacted. Your Splunk deployment will continue to receive data, and the Indexers will continue to index the data as usual. However, upon exceeding the indexing volume, you will receive a warning message on top of your Search HEAD or web interface so that you can either reduce your data intake or PURCHASE a larger capacity license. |
|