Unable to Renew DevTest license

[peterow]

I received the new license today.
I tried both methods; upload Splunk.License file and Copy+Paste xml content.
Both failed with this error message:

Bad Request — web_1751612044.5449162.lic: failed to add because: cannot add lic w/ subgroupId=DevTest:<my.email@mycompany.com> to stack w/ subgroupId=Production

I have renewed license previously and this is not a lab test system.

Appreciate any advise.

[kiran_panchavat]

@peterow 

The error typically occurs when you're trying to add a Developer/Test license to a Splunk instance that is currently using a Production license stack. Splunk enforces license stack segregation, meaning you can't mix Dev/Test licenses with Production ones. 

If you're moving to a Dev/Test license (e.g., for a non-production environment), you need to remove the existing Production license first. 

NOTE:- Only do this if you're sure the system should be running under a Dev/Test license. Removing a Production license from a live production system could cause compliance or functionality issues.

[peterow]

Hi Kiran,

Thanks for sharing.

Mine is a Dev system that had expired.
So, I am surprised to see the error.

I'll take your suggestion to remove the old license and try again.

Regards,

Peter

[PrewinThomas · Accepted solution]

@peterow 

Splunk normally doesn't allow mixing licenses from different subgroups in the same stack. SO if your license stack is production and you use Dev license, it may not allow.

Remove all existing licenses from the stack (including expired ones).
Better restart Splunk
Then add your dev license.

Regards,
Prewin
Splunk Enthusiast | Always happy to help! If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!

[peterow]

Hi Prewin,

Sorry for my late response.

I will follow your suggested steps below.
Will update you on my results.

Regards,

Peter

[peterow]

Update:

I remove the old expired license (that was incorrectly detected as a PRODUCTION license when it is Non-Production):

/opt/splunk/bin/splunk remove license <license_hash>

Then I went back to the Splunk Web:

• Log in to Splunk Web as an admin.
• Navigate to Settings > Licensing.
• Add new license

New license successfully added

 Thanks both @kiran_panchavat and @PrewinThomas for your help.

[PrewinThomas]

@peterow 
Great to see that your issue has been resolved!

[PrewinThomas]

@peterow 
Sure. Feel free to post your results.

Consider giving karma or marking it as the accepted solution(if it resolved your issue)— it helps recognize the efforts of volunteers and encourages continued contributions to the community.

Thanks
Prewin