Trying to upgrade to premium, trying to charge me for 2x engines when I only have 1

[novel comet]

I am attempting to upgrade my organization to a Premium plan, but the checkout/billing summary is attempting to charge me for 2 engine slots ($58/mo) instead of 1 slot ($29/mo).

Architecture: I am running a distributed parent-child setup.

[sinful crystal]

Important Information

Thank you for getting in touch with your support request. To expedite a swift resolution, could you kindly provide the following information? Rest assured, we will respond promptly, and we greatly appreciate your patience. While you wait, please check the links below to see if this issue has been previously addressed. If you have managed to resolve it, please use run the command /resolve or press the green resolve button below.

Log Files

If you possess any log files that you believe could be beneficial, please include them at this time. By default, CrowdSec logs to /var/log/, where you will discover a corresponding log file for each component.

Guide Followed (CrowdSec Official)

If you have diligently followed one of our guides and hit a roadblock, please share the guide with us. This will help us assess if any adjustments are necessary to assist you further.

Screenshots

Please forward any screenshots depicting errors you encounter. Your visuals will provide us with a clear view of the issues you are facing.

© Created By WhyAydan for CrowdSec ❤️ · Feb 9, 2026, 3:21 PM

[copper radish]

Yes you have a distributed setup so its $29 for the parent and $29 for child, each corrosponds as a slot, each slot is $29.

[novel comet]

Is there anyway to have a child and parent distributed setup where that isnt the case or no?

Even if the child is totally local only

[copper radish]

No, you can only have that if you split the child and then have that inside a seperate org.

Or simply use something like Rsyslog to transfer the logs from the where the child is running to the parent, so only one engine is needed.

[novel comet]

Not trying to get around anything here, I want to get the subscription but 29$/m is easier to swallow than 58$/m

I see

Thank you

[copper radish]

Yeah I understand its not going round the pricing it just spending smarter

[novel comet]

With the proposed solution you mentioned, I currently have a traefik bouncer on the child host, would that be able to use app sec and such locally and report back to the main parent and still work?

[copper radish]

Depending on where your parent is running you can simply just expose the appsec port to traefik?

then you just need to get the traefik logs to the parent, which docker support syslog driver or again rsyslog the file to parent

[novel comet]

I really appreciate the quick response, tooks some time to stop troubleshooting on my own and message support lol