https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702205#M238130 <P>Good morning,&nbsp;</P><P>Getting a weird error this morning when trying to run searches. It is saying that m license is expired, or I have exceeded your license limits too many times.&nbsp;</P><P>&nbsp;</P><P>1. I have a valid Enterprise License at about 750GB a day</P><P>2. Within the license manager all is well. No violations, valid license, etc.&nbsp;</P><P>3. Peers are associated to the license group (750GB is what I allocated for it)&nbsp;</P><P>4. Everything looks green with no messages&nbsp;</P><P>&nbsp;</P><P>Not sure what is causing this issue but sometimes search will work and sometimes it wont. However, it&nbsp; will always throw the litsearch error.&nbsp;</P> Thu, 17 Oct 2024 18:01:31 GMT JoshuaJJ 2024-10-17T18:01:31Z https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702205#M238130 <P>Good morning,&nbsp;</P><P>Getting a weird error this morning when trying to run searches. It is saying that m license is expired, or I have exceeded your license limits too many times.&nbsp;</P><P>&nbsp;</P><P>1. I have a valid Enterprise License at about 750GB a day</P><P>2. Within the license manager all is well. No violations, valid license, etc.&nbsp;</P><P>3. Peers are associated to the license group (750GB is what I allocated for it)&nbsp;</P><P>4. Everything looks green with no messages&nbsp;</P><P>&nbsp;</P><P>Not sure what is causing this issue but sometimes search will work and sometimes it wont. However, it&nbsp; will always throw the litsearch error.&nbsp;</P> Thu, 17 Oct 2024 18:01:31 GMT https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702205#M238130 JoshuaJJ 2024-10-17T18:01:31Z https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702209#M238131 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/253478">@JoshuaJJ</a>&nbsp;,</P><P>check if yu have network issues in communication between Indexers and License Master.</P><P>Otherwise, open a case to Splunk Support.</P><P>Remember to download and send them a diag from the machine that's sending the message and from an indexer.</P><P>Ciao.</P><P>Giuseppe</P> Thu, 17 Oct 2024 18:24:53 GMT https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702209#M238131 gcusello 2024-10-17T18:24:53Z https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702216#M238133 <P>Will do. Thanks for your speedy response!&nbsp;</P> Thu, 17 Oct 2024 19:34:32 GMT https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702216#M238133 JoshuaJJ 2024-10-17T19:34:32Z https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702391#M238171 <P>I believe I figured out what was wrong.&nbsp; Turns out our admin forgot to point the newly installed SH cluster member to the license manager.&nbsp; It is now pointing to the LM. How long does it take for the lit search error to clear?&nbsp;</P> Mon, 21 Oct 2024 15:26:21 GMT https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702391#M238171 JoshuaJJ 2024-10-21T15:26:21Z https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702397#M238172 <P>Ideally it should clear right away, however if not try manually electing a new SH captain and wait 5-10 minutes for the SH bundle to replicate.</P> Mon, 21 Oct 2024 15:59:57 GMT https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702397#M238172 dural_yyz 2024-10-21T15:59:57Z https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702405#M238176 <P>Awesome, will do this right away!&nbsp;</P><P>&nbsp;</P><P>Thanks,&nbsp;</P><P>&nbsp;</P><P>JJ&nbsp;</P> Mon, 21 Oct 2024 16:51:24 GMT https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702405#M238176 JoshuaJJ 2024-10-21T16:51:24Z https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702503#M238189 <P>Error is gone! Thank you all for your help <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span>&nbsp;</P> Tue, 22 Oct 2024 14:49:47 GMT https://community.splunk.com/t5/Splunk-Search/Error-in-amp-quot-litsearch-amp-quot-command/m-p/702503#M238189 JoshuaJJ 2024-10-22T14:49:47Z