topic I have installed the splunk.license file but splunk is still not indexing any event? in Getting Data In

I have installed the splunk.license file but splunk is still not indexing any event?

cebo_myeza — Mon, 14 Sep 2015 07:29:15 GMT

I have exceeded splunk license limit too many times but now i have the splunk.license file and it's already installed and the problem now is that splunk is still not indexing any event.

please help.

Re: I have installed the splunk.license file but splunk is still not indexing any event?

MuS — Mon, 14 Sep 2015 07:49:31 GMT

Indexing does not stop on a license violation, search will be disabled. Check your disk space if there is more than 5gb free, that's the default value.

Re: I have installed the splunk.license file but splunk is still not indexing any event?

cebo_myeza — Mon, 14 Sep 2015 08:00:54 GMT

hi MuS

I am using splunk free, i head 5 hard warnings before when i was still under 500MB/day and the disk space now is 5GB/day after splunk.license file installation but i am still under violation, i can not do anything.

Re: I have installed the splunk.license file but splunk is still not indexing any event?

MuS — Mon, 14 Sep 2015 08:44:21 GMT

Open a support case and ask for a reset license. Still indexing should not stop due to the violation, this Sound like a different problem

Re: I have installed the splunk.license file but splunk is still not indexing any event?

miteshvohra — Mon, 14 Sep 2015 12:33:54 GMT

If your download trial is over 60-day period, you cannot extend the trial duration by simply copying the license from another download trial or overwriting the existing Splunk instance with a fresh download copy. (this is most likely your case since you mentioned 'splunk.license' file name, commercial/paid enterprise license files are named differently.)

Also a download trial only allows 3 warnings before it locks down your search (except searching _internal index).

A reset license only allows to reset the count of the warnings but will not extend your trial license for another 60-day window.

Re: I have installed the splunk.license file but splunk is still not indexing any event?

cebo_myeza — Tue, 15 Sep 2015 01:39:22 GMT

Hi Miteshvohra

splunk.license is the license i got only for extending a disk space from 500mb/day to 5gb/day and my trial period is still active.

Re: I have installed the splunk.license file but splunk is still not indexing any event?

saurabh_tek — Tue, 08 Dec 2015 15:17:11 GMT

Even i am facing the same thing, i was using 500MB/day trial and feeded in 30GB logs
index=* shows me the logs in search

but since i was getting warning so i added NFR license for 20GB valid till next 1 year (with the name splunk.license) and now looks like indexing has not started as daily quota is not utilized for today's 20 GB.