topic Re: How Many Splunk Enterprise Reset Warnings License can we have per year in Security

How Many Splunk Enterprise Reset Warnings License can we have per year

baroudiem — Thu, 31 Jan 2019 09:07:30 GMT

Hi,
We were facing some issues with our entreprise license and we got a Splunk Enterprise Reset Warnings Licenses to resolve the problem from our reseller. I would like to ask about that type of license : how many can we have per year ?

Thanks

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

chrisyounger — Thu, 31 Jan 2019 09:10:25 GMT

Hi @baroudiem

You can have 5 violations in a rolling 30 day period. There is more info here: https://docs.splunk.com/Documentation/Splunk/7.2.3/Admin/Aboutlicenseviolations

All the best

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

baroudiem — Thu, 31 Jan 2019 09:15:16 GMT

hi @chrisyoungerjds
Yes i know and how many reset can i make per yer ?
Is it limited or not ?

thanks

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

chrisyounger — Thu, 31 Jan 2019 09:16:55 GMT

There is no overall yearly limit.

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

baroudiem — Thu, 31 Jan 2019 09:18:31 GMT

Perfect !
Thank you for your quick response

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

chrisyounger — Thu, 31 Jan 2019 09:18:36 GMT

Oh also "resets" are granted by support or your account manager. They will ask you a lot of questions if you keep requesting resets more than once.

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

baroudiem — Thu, 31 Jan 2019 09:24:05 GMT

Yeah , i see ...
We will try for sure to avoid license violation and use it in extreme cases
thanks

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

dkeck — Thu, 31 Jan 2019 09:25:04 GMT

HI,

why don´t you use a non violation licence? With 6.5.0 you can request one of these, then you will not have to reset your license when you have 5 violations.

https://docs.splunk.com/Documentation/Splunk/7.2.3/Admin/Aboutlicenseviolations

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

baroudiem — Thu, 31 Jan 2019 09:45:26 GMT

Hi,
Could it be you're referring to the no-enforcement license introduced in Splunk 6.5 ?

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

dkeck — Thu, 31 Jan 2019 09:48:03 GMT

Yes, mixed up the terms 🙂 so why don´t you use one of those?

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

baroudiem — Thu, 31 Jan 2019 09:51:38 GMT

we used one of these once ! can you please explain for me the diffrence between both of them ?

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

chrisyounger — Thu, 31 Jan 2019 09:55:40 GMT

You can request a permanent no-enforcement license. this means you can breach as often as you want and you won't be stopped by any technical measures. However you will be in breach of EULA. Splunk can also legally do a true-up which might be expensive for you.

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

dkeck — Thu, 31 Jan 2019 09:56:30 GMT

A non enforcement license will simply prevent that your search function is disabled once you hit the 5 violations.

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

baroudiem — Thu, 31 Jan 2019 10:14:58 GMT

We have used a no-enforcement license and i think if you use it once it will be permanent it n it ?

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

baroudiem — Thu, 31 Jan 2019 10:16:44 GMT

okey,i see that
thanks

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

dkeck — Thu, 31 Jan 2019 10:17:08 GMT

Just check under settings and licence if there is one. Then its in use.

Re: How Many Splunk Enterprise Reset Warnings License can we have per year

baroudiem — Thu, 31 Jan 2019 10:23:52 GMT

yes we have one