|
We setup a splunk forwarder on one of our servers to relay log files. Now we are getting a message that the license has expired. Do we need to buy a license for the forwarders as well? |
3 Answers:
|
No, you do not need to purchase a license for the forwarders. By default, Splunk will use an 'Enterprise Trial' license when it is initially installed. If you are enabling any of the forwarding apps, you should go to $SPLUNK_HOME/etc and copy the splunk-forwarder.license to splunk.license to avoid future license issues. |
|
The reason for doing so is that those error messages will pollute logs. |
