topic Your Splunk license expired or you have exceeded your license limit too many times in Security

Your Splunk license expired or you have exceeded your license limit too many times

jhuebner — Thu, 21 Oct 2010 00:45:07 GMT

So I've read this link, but I still have questions.

http://answers.splunk.com/questions/322/what-happens-when-i-exceed-my-licensed-limit

I'm not trying to index a LARGE amount of data, I'm only using SPLUNK as a front end for OSSEC. I have ~25 windows servers pointing at my OSSEC instance, and then it pointing @ SPLUNK.

If I scale back on the amount of data being indexed (change it dramatically) how long will it take to re-enable my license?

Re: Your Splunk license expired or you have exceeded your license limit too many times

justinhart — Thu, 21 Oct 2010 00:57:07 GMT

It looks like you will have to be violation-free for 30 days before search will be re-enabled. You might check out this documentations: Install a License There is a section at the bottom about violations.

Re: Your Splunk license expired or you have exceeded your license limit too many times

Simeon — Thu, 21 Oct 2010 01:09:04 GMT

The violaions are on a rolling period. So if you have just recently violated the maximum number of times, you will have to wait until one of those violations roll out of the window. Otherwise, you will need to contact your sales representative or account manager to get this addressed.

Re: Your Splunk license expired or you have exceeded your license limit too many times

jhuebner — Thu, 13 Jan 2011 02:41:29 GMT

Else, I've found doing an "update" install clears the cache too 🙂

JLH

Re: Your Splunk license expired or you have exceeded your license limit too many times

xabidh — Wed, 22 Jun 2016 10:23:09 GMT

For me worked, renaming the file locate in $Splunk_Home\etc\licenses\download-trial\enttrial.lic and restart Splunk services.