Configuring a License Server

00:00

Hello and welcome back to the Splunk Enterprise Certified Administrator course on Cyber. In this video, we're gonna be doing a lab where will just review how to set up your Splunk license server and then also how to set up your other Splunk enterprise instances to report to this device for their license information.

00:18

So let's just get started. First, I'll show you how to access the license information from Splunk Web. So first, obviously sign into Splunk Web

00:30

and they go to settings and under system licensing.

00:34

And so, if you wanted to add a new license to your license server, you can simply select, add license and then browse to select a file. Or you can copy and paste the XML from the file directly in here by clicking this and then you just click install, and then it will trigger a restart for Splunk.

00:54

There is another option for saying this up. If you want to do it through the command line, then you can simply go to this directory. Uh, whatever your Splunk home is at sea licenses

01:07

and then you would just put it in this directory and it should be a dot license file, Whatever your license is.

01:15

Andi that so? That's another Bible option to do it. I tend to just do it through the Web because this is very simple and easy on. There's no way to manage this directory

01:26

from a deployment app or from the deployment server, anything. So you would have to manually go in here to set this up anyways, so you don't get any benefit from not setting up in Splunk web. So this is how I would normally do this

01:41

and then, uh, likewise, if you were configuring the license slaves or clients to report to this license server, the way that you could do that is also by going into their Splunk Web

01:55

settings licensing and changed to slave.

01:59

Ah. Then you select this option and put in the U. R I Sobh e t p p s colon ford slash ford slash

02:07

my I p address in this instance, And then whatever the *** management port is, which should always be 80 89 unless you have some

02:14

good, valid business reason for changing it,

02:16

and then you just hit save and that would change your device to a license slave which just means that instead of checking its own local directory for the license, it will ping into whatever device you specify here and check for their license information. Now,

02:35

this is not the way I would ever recommend setting this up, So I'm just showing you for the sake of you knowing and in case it comes up on the exam. But I would not recommend you set up this way.

02:49

They're obviously I'm gonna recommend you do it directly through the configuration files. I think you've probably called on by now. That's how I prefer to do everything.

02:58

And, uh

03:01

So I guess I'll show you the command line way to do this as well. But again, not the way out advice doing it. But you dio up Splunk been Splunk. I believe

03:15

it's that edit command. See, I don't even use this. So let's look it up just to make sure So I'm not typing randomly, but I believe it's

03:27

It's long

03:30

the, uh Seelye, Let's do that.

03:35

Configure a license. Slave.

03:38

Um,

03:40

use command line.

03:43

Okay, so this is the command toe adolescent slave Splunk at it. So I was right. But I would not have guessed the rest of this licensure hyphen, local slave. So this is setting it so that it knows that. Hey, me local my eye.

03:59

I'm going to be a license slave to

04:01

this,

04:03

uh, device. Whatever you specify here, in my case, it would be a C t p p H t T p s colon for it slash ford slash this I p address colon 80 89.

04:17

But again, I would not recommend doing it this way. So what? What? This command and what this change both do is they actually change server dot com.

04:30

And so there's a stanza in there for setting your license server. So you just really want to actually set it directly through that? So I'll show you if you just same way we've been doing

04:45

throughout this course. If you do license dot com No, not license that Khonsari server dot com

04:49

Splunk and I just happened already. Have it. But this should bring up the first Google result.

04:57

I mean, just search for license on. Maybe you'll have to tap through a couple times,

05:05

but here it is. So this is the stanza license. And then you set the master. You are. I will either be self,

05:14

which is the default, or you can specify your I.

05:16

So let's go back here and do a few tool

05:20

server list and what's just there debugging there and sorry, let's actually just do license because that's all we care about. I'm gonna clear this Brennan again, So you get a better view

05:32

so you can see this is where this information is. This master you are. I is currently set to self.

05:39

So the way that we want to change this if this is the default server dot com

05:44

Obviously, if you've been listening, I'm gonna push for let's set it through a deployment app on the deployment server.

05:51

So

05:54

this device just also happens to be my employment server.

05:58

So you would go to your deployment server, go to the deployment APS directory, making a new directory do dash P because we're going to be adding a subdirectory as well. And we'll dio

06:11

ah

06:14

Splunk

06:18

on.

06:26

We'll just do Spong

06:29

all licenses.

06:30

I don't know if I really like that license

06:35

license client slash default.

06:40

That kind of describes what we're doing here. We're making all of our spawn components license. We're making them clients to the license server.

06:49

So we'll do that default on. We know that it's server dot com. We know that it's license on. We know that it master you are I is what we want to set here. We know it's https, whatever the I p addresses. So we'll go hopes and I get to see my steam library. Sorry about that.

07:10

But we'll go back to here, grab our

07:15

I p address

07:17

case that in

07:19

and then the management for

07:21

And so this would be the setting

07:24

that we're setting. Teoh basically make it so that

07:30

our clients will

07:32

know where to go for the license server. So then all we would need to do beyond this is go to our Ford or management where we would make a server class.

07:46

Uh, let's say Splunk, because we know it's only spawn components. Fall

07:50

license clients

07:54

save.

07:56

Add the app to it

08:01

will know that this needs a restart to enable that setting.

08:05

And then the way you would want to do this is set it up so that this only applies to your Splunk enterprise instances because they're the only ones that don't need this. So we could make it like, let's just say in my environment, s P o K star is how you know what's a Splunk device.

08:24

So I could said this naming convention.

08:26

So then this will automatically. Anytime a Splunk device comes into my deployment server, this will automatically it sent to them and they'll become they'll become clients of my license, master. So

08:41

that's basically how you really would actually want to set this? Um,

08:46

the only, what else do we need to discuss with this? So we've gone over how to install a new license. We've gone over the different ways to configure a license client, and now we have a server class that will make all of our Splunk devices,

09:03

uh,

09:05

clients of the licence master. So I think that covers just about everything. The only other topic we might want to cover really quick is just how to see your license information. So it would be in this, uh,

09:20

licensing

09:22

tab

09:24

and you just click this usage report, and so

09:28

this when your license several will give you some cool overviews of you know how much of your license you're using If you have it broken into groups, you could get some mawr into pools. You can get some more granular information as well, if you just want to see

09:43

I don't have any data in here, so I'm not I'm not indexing anything. So and I also

09:48

I only have the free license. So this isn't the best example. But this is where you would go to basically see reporting on your licensing.

09:56

Or you could be searching on your internal index for sources license usage

10:03

as well. Start wild card. That's that its source contains license usage. And that would give you some of this information as well. It might even be how this operates. Weaken. Check that.

10:16

Yeah. Say source equals licence usage dot log,

10:20

but yes. So this is this is where you would go to review your license information on your license server. Or you could run these searches really anywhere to get this information.

10:30

But that covers everything we need to know about the license server. Now you know how to install your license, set up your license server, and then how to set up clients And then also how to set up your server classes so that instantly all servers, Spong servers, that phone home to the deployment server will automatically register

10:50

with