https://community.splunk.com/t5/Getting-Data-In/Search-head-license-violations/m-p/18530#M2544 <P>Hi, maybe you can run </P> <PRE><CODE>&gt;splunk list monitor </CODE></PRE> <P>on search head, to get all active monitored inputs </P> Wed, 29 Sep 2010 17:28:31 GMT dmlee 2010-09-29T17:28:31Z https://community.splunk.com/t5/Getting-Data-In/Search-head-license-violations/m-p/18529#M2543 <P>I'm using the forwarder license on my search head. I've disabled all inputs, and any extra apps. Yet I still get license violations. 7.1MB was indexed yesterday, for example.</P> <P>What's the magic to make this stop happening?</P> <P>Splunk 4.1.4 x64 on SuSE Linux.</P> Thu, 22 Jul 2010 20:22:03 GMT https://community.splunk.com/t5/Getting-Data-In/Search-head-license-violations/m-p/18529#M2543 twinspop 2010-07-22T20:22:03Z https://community.splunk.com/t5/Getting-Data-In/Search-head-license-violations/m-p/18530#M2544 <P>Hi, maybe you can run </P> <PRE><CODE>&gt;splunk list monitor </CODE></PRE> <P>on search head, to get all active monitored inputs </P> Wed, 29 Sep 2010 17:28:31 GMT https://community.splunk.com/t5/Getting-Data-In/Search-head-license-violations/m-p/18530#M2544 dmlee 2010-09-29T17:28:31Z https://community.splunk.com/t5/Getting-Data-In/Search-head-license-violations/m-p/18531#M2545 <P>Do you happen to have any summary indexes?</P> <P>I had the same issue where I had a summary index that wasn't named "summary", and it counted against my license..</P> <P>I ended up setting up my search head as a forwarder to my two indexers and it seemed to resolve the issue.</P> <P>Brian</P> Wed, 29 Sep 2010 19:31:04 GMT https://community.splunk.com/t5/Getting-Data-In/Search-head-license-violations/m-p/18531#M2545 Brian_Osburn 2010-09-29T19:31:04Z