topic Re: Alert for License Master Communication Error in Alerting https://community.splunk.com/t5/Alerting/Alert-for-License-Master-Communication-Error/m-p/404117#M11765 <P>Hi,</P> <P>What you are doing is correct.</P> <P>Please find the below splunk documentation.</P> <P>"To find out if a license slave has been unable to reach the license master, look for an event that contains <STRONG><EM>failed to transfer rows</EM></STRONG> in <STRONG><EM>splunkd.log</EM></STRONG> or in the <STRONG><EM>_internal index</EM></STRONG>."</P> <P>Reference: <A href="https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Aboutlicenseviolations">https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Aboutlicenseviolations</A></P> Wed, 18 Sep 2019 08:07:59 GMT ekcsoc 2019-09-18T08:07:59Z Alert for License Master Communication Error https://community.splunk.com/t5/Alerting/Alert-for-License-Master-Communication-Error/m-p/404116#M11764 <P>Hi,</P> <P>I want to alert when there is communication error with license master.<BR /> I tried with index=_internal sourcetype=splunkd "failed to transfer rows*"<BR /> But want to know from splunk experts the query to know if there is any communication error.<BR /> Thanks,</P> Thu, 21 Feb 2019 06:11:46 GMT https://community.splunk.com/t5/Alerting/Alert-for-License-Master-Communication-Error/m-p/404116#M11764 ips_mandar 2019-02-21T06:11:46Z Re: Alert for License Master Communication Error https://community.splunk.com/t5/Alerting/Alert-for-License-Master-Communication-Error/m-p/404117#M11765 <P>Hi,</P> <P>What you are doing is correct.</P> <P>Please find the below splunk documentation.</P> <P>"To find out if a license slave has been unable to reach the license master, look for an event that contains <STRONG><EM>failed to transfer rows</EM></STRONG> in <STRONG><EM>splunkd.log</EM></STRONG> or in the <STRONG><EM>_internal index</EM></STRONG>."</P> <P>Reference: <A href="https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Aboutlicenseviolations">https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Aboutlicenseviolations</A></P> Wed, 18 Sep 2019 08:07:59 GMT https://community.splunk.com/t5/Alerting/Alert-for-License-Master-Communication-Error/m-p/404117#M11765 ekcsoc 2019-09-18T08:07:59Z