Installation

How can I migrate a Splunk License Master to a brand new server without service interruption?

dshakespeare_sp
Splunk Employee
Splunk Employee

I need to migrate my old standalone Splunk License Master to a new server as my old License Master is being decommissioned. I need to do this without interruption to service.

My License Slaves are configured to point to a License Master FQDN. The plan is to change the DNS record of the License Master to a new IP address. What is the best way of achieving this?

Labels (1)

dshakespeare_sp
Splunk Employee
Splunk Employee

A suggestion would be

  1. "splunk stop" on old License Master
  2. "splunk stop" on new License Master
  3. copy over the relevant licenses from the old License Master to the new License Master
  4. copy over etc/system/local/server.conf (which contains the pool configuration) and etc/instance.cfg from old License Master to new License Master This should ensure that the new LM conserves the same GUID
  5. Change DNS to reflect new IP Address
  6. Wait a few minutes and test low level connectivity from License Slaves to new License Master (ping / dig / arp -a)
  7. "splunk start" on new LM

  8. As a safety precaution rename /etc/instance.cfg to /etc/instance.cfg.old to ensure that if the old License Master is restarted the GUID does not clash with the new License Master

  9. Test

Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...