Alerting

1 cle_pool_over_quota message reported by 1 Indexer

KayBeesKnees83
Explorer

Greetings, 

I recently uploaded my new term license. However, I noticed the following message:

* 1 cle_pool_over_quota message reported by 1 indexer - correct by midnight to avoid warning 

However, my company purchased a sizable term license. Is this message safe to ignore? I cannot provide a screenshot because I am operating on an airgapped network.

Furthermore, is there a way to mitigate this alert  to prevent receiving a warning? Again, we have a very large license and are quota is nowhere near our volume limit.

Is it somehow related to updating my license? As a I mentioned, I recently updated the new term license to replace the license that is set to expire. Or should I delete the pool from the previous license and create a new one associated with the new term license? 

Thank you. 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Maximize the Value from Microsoft Defender with Splunk

<P style=" text-align: center; "><span class="lia-inline-image-display-wrapper lia-image-align-center" ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

<FONT size="5"><FONT size="5" color="#FF00FF">Get the latest news and updates from the Splunk Community ...