<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic license violation in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/license-violation/m-p/507506#M86369</link>
    <description>&lt;P&gt;Hello Everyone!&lt;/P&gt;&lt;P&gt;Today (6th of July)&amp;nbsp; I started to use Free license because my Enterprise Trial has been expired on 25th of May.&lt;/P&gt;&lt;P&gt;I added data via uploading of txt file which includes 93 events but I can see only 4 of them.&lt;/P&gt;&lt;P&gt;Also&amp;nbsp;I got the following message&amp;nbsp;&lt;STRONG&gt;&amp;nbsp;Missing or malformed messages.conf stanza for LM_LICENSE:SLAVE_WARNING__1594016147&amp;nbsp;&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;I run the this search: &lt;STRONG&gt;index=_internal per_index_thruput earliest=-90d@d latest=now | timechart span=1d eval(sum(kb)/1024) as "Daily Indexing Volume in MB"&lt;/STRONG&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;and it says that for 90 days I used&amp;nbsp;139.38 MB which looks good.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;Could you please advise why I get this message and how I can fix my issue?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;thank you in advance&lt;/P&gt;</description>
    <pubDate>Mon, 06 Jul 2020 09:21:14 GMT</pubDate>
    <dc:creator>kateryna</dc:creator>
    <dc:date>2020-07-06T09:21:14Z</dc:date>
    <item>
      <title>license violation</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/license-violation/m-p/507506#M86369</link>
      <description>&lt;P&gt;Hello Everyone!&lt;/P&gt;&lt;P&gt;Today (6th of July)&amp;nbsp; I started to use Free license because my Enterprise Trial has been expired on 25th of May.&lt;/P&gt;&lt;P&gt;I added data via uploading of txt file which includes 93 events but I can see only 4 of them.&lt;/P&gt;&lt;P&gt;Also&amp;nbsp;I got the following message&amp;nbsp;&lt;STRONG&gt;&amp;nbsp;Missing or malformed messages.conf stanza for LM_LICENSE:SLAVE_WARNING__1594016147&amp;nbsp;&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;I run the this search: &lt;STRONG&gt;index=_internal per_index_thruput earliest=-90d@d latest=now | timechart span=1d eval(sum(kb)/1024) as "Daily Indexing Volume in MB"&lt;/STRONG&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;and it says that for 90 days I used&amp;nbsp;139.38 MB which looks good.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;Could you please advise why I get this message and how I can fix my issue?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;thank you in advance&lt;/P&gt;</description>
      <pubDate>Mon, 06 Jul 2020 09:21:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/license-violation/m-p/507506#M86369</guid>
      <dc:creator>kateryna</dc:creator>
      <dc:date>2020-07-06T09:21:14Z</dc:date>
    </item>
  </channel>
</rss>

