I tryed Splunk with the trial licence. After 60 days I switched to a the free licence. Since then, I've got the following message :
Error in 'litsearch' command: Your Splunk license expired or you have exceeded your license limit too many times
When I look on the licensing menu :
I'm in the : Free license group with no licensing alert but 13 license window warnings reported by 1 indexer.
the warning display :
This pool has exceeded its configured poolsize=0 bytes. A warning has been recorded for all members.
I have deativated all sources so I've got no input data on my splunk server.
Please help me to fix this problem? I don't know what I have to do?
You will need to look at the age of the warnings. With the free license you can only have 3 within the past 30 days. With the enterprise license you can have 5. It is possible that you had 4 and when you switched to free the capability to search was lost because your limit dropped from 5 to 3.
See this post:
Yes, or wait until you have fewer than 3 in 30 days.
Not sure if you can get a reset license for the free version, but it would not hurt to ask Splunk Support for one.