topic Re: Splunk Cloud Licnese in Splunk Cloud Platform

Splunk Cloud Licnese

Vnarunart — Thu, 01 Aug 2024 03:49:46 GMT

Hi, I need help as I'm new to Splunk and was assigned this role by a resigned administrator. I need to find out the expiration date of our Splunk Cloud license.

I can't access the menu: Settings > System > Permissions (I've checked the assigned user's capabilities but there are no permissions for license_edit, license_read, license_tab, or license_view_warnings).

Is it possible that there's a license manager somewhere on-premise since we're using Heavy Forwarder and Deployment Server?

Please advise on what I can do if I can't contact the previous administrator.
What information should I gather beforehand to be ready to open a Support Ticket?

I apologize if I've misunderstood anything.

Re: Splunk Cloud Licnese

richgalloway — Thu, 01 Aug 2024 12:42:47 GMT

Contact your Splunk account team for information about your Splunk Cloud license. They also can help ensure you have entitlement to submit support cases.

If you're running heavy forwarders and a DS then you have an on-prem LM (perhaps shared with the DS). However, I would not expect the expiration date of that license to match the expiration date of the Splunk Cloud license (it's possible, but not guaranteed).

Re: Splunk Cloud Licnese

Vnarunart — Fri, 02 Aug 2024 07:37:18 GMT

Thanks for the advice, I appreciate it.
I am working on Splunk account.

In the scenario you mentioned about "pherhaps shared with the DS", I've checked directly on the DS under Settings > SYSTEM > Licensing and found the values to be default (expire: 2038). Is this the same license you're referring to? If not, could you please point me to the specific location or configuration file that references the LM I should be looking for?

Thanks again!

Re: Splunk Cloud Licnese

richgalloway — Fri, 02 Aug 2024 12:17:31 GMT

The default (trial) Splunk license expires after 60 days so would not have a 2038 expiration date.

The free license, which is what the trial license becomes after the trial ends, has a 2038 expiration date, but also has a number of limitations, including preventing an instance from functioning as a heavy forwarder or deployment server. Also, the Settings->Licensing screen should clearly say "Free license".

Again, your Splunk account team is your best source of answers about your licenses.

Re: Splunk Cloud Licnese

PickleRick — Fri, 02 Aug 2024 12:24:49 GMT

HFs typically run with the forwarder license. It doesn't allow local indexing and I suppose it might be time-unlimited. For DS there can be that funky "no ingest volume" license meant for running such on-prem components when you're flying Cloud.

And they indeed might not have anything to do with the Cloud license in terms of expiration date.

Re: Splunk Cloud Licnese

Vnarunart — Tue, 06 Aug 2024 04:28:35 GMT

I found that I need a Splunk cloud account (a member of Cloud Stack/Instances) to access the data, which the user I previously had did not have. However, I would like to thank everyone for their efforts in helping me this time.

I’m grateful for your mentorship.

Re: Splunk Cloud Licnese

mckenzm — Thu, 29 Jan 2026 03:56:50 GMT

It would be nice to know where this is found. I am a cloud user and I have no idea where this is displayed.

Not the most user friendly platform. It will however give me usage stats.