https://community.splunk.com/t5/Security/Trial-License/m-p/103961#M14301 <P>I installed splunk trial (4.3.4, build 136012) on Win2008 and within few hours I ran into "License warning issued within past 24 hours". I am very positive I did not use 500MB (the only index I turned on was local windows app). Indexes tab shows 1MB on few indexes, the rest is 0MB</P> <P>When I look at the license screen, I see </P> <P>"This server is acting as a standalone license server"<BR /> "This server is configured to use licenses from the Forwarder license group"<BR /> "Licensed daily volume 1 MB"</P> <P>there is one alert</P> <P>Severity Time Message Indexer Pool Stack Category<BR /> Oct 26, 2012 12:00:00 AM <BR /> (15 hours ago) Indexing quota exceeded for this pool, poolsz=1048576 bytes myservername auto_generated_pool_forwarder forwarder license_window</P> <P>any idea?</P> Mon, 28 Sep 2020 12:41:58 GMT JiriN 2020-09-28T12:41:58Z https://community.splunk.com/t5/Security/Trial-License/m-p/103961#M14301 <P>I installed splunk trial (4.3.4, build 136012) on Win2008 and within few hours I ran into "License warning issued within past 24 hours". I am very positive I did not use 500MB (the only index I turned on was local windows app). Indexes tab shows 1MB on few indexes, the rest is 0MB</P> <P>When I look at the license screen, I see </P> <P>"This server is acting as a standalone license server"<BR /> "This server is configured to use licenses from the Forwarder license group"<BR /> "Licensed daily volume 1 MB"</P> <P>there is one alert</P> <P>Severity Time Message Indexer Pool Stack Category<BR /> Oct 26, 2012 12:00:00 AM <BR /> (15 hours ago) Indexing quota exceeded for this pool, poolsz=1048576 bytes myservername auto_generated_pool_forwarder forwarder license_window</P> <P>any idea?</P> Mon, 28 Sep 2020 12:41:58 GMT https://community.splunk.com/t5/Security/Trial-License/m-p/103961#M14301 JiriN 2020-09-28T12:41:58Z https://community.splunk.com/t5/Security/Trial-License/m-p/103962#M14302 <P>yes the "Forwarder license group" means 1MB license.<BR /> go to manager &gt; licensing and switch to trial or free license group. (they should be 500MB)</P> Fri, 26 Oct 2012 15:53:38 GMT https://community.splunk.com/t5/Security/Trial-License/m-p/103962#M14302 yannK 2012-10-26T15:53:38Z