Hi All, Currently we could License warning message popping out in splunk web portal ? This is the firs warning message we have got for this month and as per splunk document we are allowed for five violation in 30 day period. Similarly when checked in the license manager under Enterprise license group --> alerts -- > Current & Permanent
Current : 1 pool warning reported by 1 indexer
Permanent : 10 license window warnings reported by 8 indexers
Volume used today is under the threshold limit, but still we are getting this warning message
Effective daily volume is 348 GB (License limit)
auto_generated_pool_enterprise is 187 GB
When checked Usage report Today's License Usage (GB) we could see the license usage is increasing constantly.
Kindly let me know how to troubleshoot this issue and control the license before it goes out of hands.
And also let me know how to figure out which source/source type/host are consuming more licenses.
Details : Splunk 6.2.1 version
License type : Enterprise License.
thanks in advance
