https://community.splunk.com/t5/Installation/How-do-I-remove-expired-Splunk-Light-licenses-and-still-preserve/m-p/358589#M4991 <P>I was able to clean this up using the CLI (reference <A href="https://docs.splunk.com/Documentation/Splunk/6.6.1/Admin/LicenserCLIcommands" target="_blank">https://docs.splunk.com/Documentation/Splunk/6.6.1/Admin/LicenserCLIcommands</A>).</P> <OL> <LI>Logged into the Splunk server and ran: <STRONG>splunk list licenses</STRONG>. Captured the HASHES for the expired licenses from the GUI.</LI> <LI>Removed the expired license using command: <STRONG>splunk remove licenses HASH</STRONG>. This removed the license immediately from the GUI - no restart required.</LI> </OL> <P>I still see four license pools when running the command: <STRONG>splunk list licenser-pools</STRONG>; however, only <STRONG>auto_generated_pool_lite</STRONG> showed used_bytes leading me to believe that was the only active pool. The other three said <STRONG>used_bytes:0</STRONG>.</P> <P>Running the command : <STRONG>splunk list licenser-messages</STRONG> still shows two messages containing the messages described in the original post. I found no way via the CLI to clean this up.</P> Tue, 29 Sep 2020 14:37:40 GMT kiles 2020-09-29T14:37:40Z https://community.splunk.com/t5/Installation/How-do-I-remove-expired-Splunk-Light-licenses-and-still-preserve/m-p/358587#M4989 <P>After a year of using Splunk Light I have four different licenses listed under Licensing in Splunk Web. Two have expired, one is a temporary Splunk Light Trial applied while waiting for a new license renewal, and the final is the actual renewal for one year. The Licensing page also shows a couple of alerts ...</P> <P><STRONG>This pool has exceeded its configured poolsize=0 bytes. A warning has been recorded for all members<BR />This pool contains slave(s) with 1 warning(s)</STRONG></P> <P>Both the Splunk Light Trial and the Splunk Light Term are currently active giving me a total of 10Gb/day but the trial will expire on 6-30-2017 which should put me back to the 5Gb/day that I purchased.</P> <P>How do I clean up these licenses in Splunk Light (no Splunk Web option to delete a license like in Enterprise) without creating issues with the license pool? There are no slaves and this is a single server configuration.</P> Tue, 16 Jun 2020 18:09:04 GMT https://community.splunk.com/t5/Installation/How-do-I-remove-expired-Splunk-Light-licenses-and-still-preserve/m-p/358587#M4989 kiles 2020-06-16T18:09:04Z https://community.splunk.com/t5/Installation/How-do-I-remove-expired-Splunk-Light-licenses-and-still-preserve/m-p/358588#M4990 <P>A bit more information. While the GUI shows only four licenses, the command <STRONG>splunk list licenses</STRONG> shows more (removed HASHES and GUIDs for security reasons).</P> <P>group_id:Lite<BR /> guid:00000000-0000-0000-0000-000000000000<BR /> is_unlimited:0<BR /> label:Splunk Light Trial<BR /> license_hash: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF<BR /> max_stack_quota:21474836480<BR /> max_users:5<BR /> max_violations:5<BR /> quota:5368709120<BR /> relative_expiration_interval:0<BR /> relative_expiration_start:0<BR /> sourcetypes:<BR /> stack_id:lite<BR /> status:VALID<BR /> subgroup_id:Production<BR /> type:lite<BR /> window_period:30</P> <P>group_id:Lite<BR /> guid:00000000-0000-0000-0000-000000000000<BR /> is_unlimited:0<BR /> label:Splunk Light Term<BR /> license_hash: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF<BR /> max_stack_quota:21474836480<BR /> max_users:0<BR /> max_violations:5<BR /> quota:5368709120<BR /> relative_expiration_interval:0<BR /> relative_expiration_start:0<BR /> sourcetypes:<BR /> stack_id:lite<BR /> status:VALID<BR /> subgroup_id:Production<BR /> type:lite<BR /> window_period:</P> <P>group_id:Lite_Free<BR /> guid:00000000-0000-0000-0000-000000000000<BR /> is_unlimited:0<BR /> label:Splunk Light Free<BR /> license_hash: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF<BR /> max_stack_quota:529530880<BR /> max_users:1<BR /> max_violations:5<BR /> quota:524288000<BR /> relative_expiration_interval:31536000<BR /> relative_expiration_start:1494872669<BR /> sourcetypes:<BR /> stack_id:lite_free<BR /> status:VALID<BR /> subgroup_id:Production<BR /> type:lite_free<BR /> window_period:30</P> <P>group_id:Lite<BR /> guid:00000000-0000-0000-0000-000000000000<BR /> is_unlimited:0<BR /> label:Splunk Light Download Trial<BR /> license_hash: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF<BR /> max_stack_quota:21474836480<BR /> max_users:5<BR /> max_violations:5<BR /> quota:5368709120<BR /> relative_expiration_interval:2592000<BR /> relative_expiration_start:1494872669<BR /> sourcetypes:<BR /> stack_id:lite<BR /> status:EXPIRED<BR /> subgroup_id:Production<BR /> type:lite<BR /> window_period:30</P> <P>group_id:Lite<BR /> guid:00000000-0000-0000-0000-000000000000<BR /> is_unlimited:0<BR /> label:Splunk Light Term<BR /> license_hash: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF<BR /> max_stack_quota:21474836480<BR /> max_users:0<BR /> max_violations:5<BR /> quota:5368709120<BR /> relative_expiration_interval:0<BR /> relative_expiration_start:0<BR /> sourcetypes:<BR /> stack_id:lite<BR /> status:EXPIRED<BR /> subgroup_id:Production<BR /> type:lite<BR /> window_period:30</P> <P>group_id:Forwarder<BR /> guid:00000000-0000-0000-0000-000000000000<BR /> is_unlimited:0<BR /> label:Splunk Forwarder<BR /> license_hash: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF<BR /> max_stack_quota:18446744073709551615<BR /> max_users:4294967295<BR /> max_violations:5<BR /> quota:1048576<BR /> relative_expiration_interval:0<BR /> relative_expiration_start:0<BR /> sourcetypes:<BR /> stack_id:forwarder<BR /> status:VALID<BR /> subgroup_id:Production<BR /> type:forwarder<BR /> window_period:30</P> <P>group_id:Free<BR /> guid:00000000-0000-0000-0000-000000000000<BR /> is_unlimited:0<BR /> label:Splunk Free<BR /> license_hash:FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF<BR /> max_stack_quota:18446744073709551615<BR /> max_users:4294967295<BR /> max_violations:3<BR /> quota:524288000<BR /> relative_expiration_interval:0<BR /> relative_expiration_start:0<BR /> sourcetypes:<BR /> stack_id:free<BR /> status:VALID<BR /> subgroup_id:Production<BR /> type:free<BR /> window_period:30</P> Tue, 29 Sep 2020 14:32:12 GMT https://community.splunk.com/t5/Installation/How-do-I-remove-expired-Splunk-Light-licenses-and-still-preserve/m-p/358588#M4990 kiles 2020-09-29T14:32:12Z https://community.splunk.com/t5/Installation/How-do-I-remove-expired-Splunk-Light-licenses-and-still-preserve/m-p/358589#M4991 <P>I was able to clean this up using the CLI (reference <A href="https://docs.splunk.com/Documentation/Splunk/6.6.1/Admin/LicenserCLIcommands" target="_blank">https://docs.splunk.com/Documentation/Splunk/6.6.1/Admin/LicenserCLIcommands</A>).</P> <OL> <LI>Logged into the Splunk server and ran: <STRONG>splunk list licenses</STRONG>. Captured the HASHES for the expired licenses from the GUI.</LI> <LI>Removed the expired license using command: <STRONG>splunk remove licenses HASH</STRONG>. This removed the license immediately from the GUI - no restart required.</LI> </OL> <P>I still see four license pools when running the command: <STRONG>splunk list licenser-pools</STRONG>; however, only <STRONG>auto_generated_pool_lite</STRONG> showed used_bytes leading me to believe that was the only active pool. The other three said <STRONG>used_bytes:0</STRONG>.</P> <P>Running the command : <STRONG>splunk list licenser-messages</STRONG> still shows two messages containing the messages described in the original post. I found no way via the CLI to clean this up.</P> Tue, 29 Sep 2020 14:37:40 GMT https://community.splunk.com/t5/Installation/How-do-I-remove-expired-Splunk-Light-licenses-and-still-preserve/m-p/358589#M4991 kiles 2020-09-29T14:37:40Z