Security

remove a server from the "Available indexers" list on license master?

dhaffner
Path Finder

We inadvertently pointed some servers to our license master, so now they are showing up in the "Available indexers" list. We do not want to add them to the "Associated indexers" list, but would like to remove them from the first list, which shows the servers that have only contacted the license master.

The changes have been corrected on the servers in question, but they are still showing in the available list. There are even old Splunk instances which have been shut down and removed, but they still show up in this available list.

Is it possible to remove these servers from the "available list" on the license master?

Thanks!

0 Karma

dart
Splunk Employee
Splunk Employee

Check to see if they are still listed in the server.conf file, and remove old server records. You'll find it in $SPLUNK_HOME/etc/system/local.

Make a backup before you make changes.

0 Karma

dhaffner
Path Finder

Thanks. I had already looked there, but the problem is that we have 40+ servers listed in that file by by GUID. So finding the GUID for a server that no longer exists is the issue. I was hoping to not have to touch each indexer to find the GUIDs. But I assume that will be the process.

0 Karma

brianpreston
Path Finder

for the record, I don't see the servers in my Available Servers list in $SPLUNK_HOME/etc/system/local/server.conf

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...