Splunk License Violation


I forgot to change the license from trial enterprise to free, as a result caused a few violations.
Is there any way for me to reset the license so that I can resume search?

Tags (1)
0 Karma


I'd disagree slightly on the other answer, I would say the easiest approach is to take a backup of your indexes, reinstall Splunk and migrate the indexes back across. This way you will regain your search capabilities immediately.

Read this for details on how to do the backup;

Of course the rest of the answer remains true, don't index so much 🙂


Oranger - this is a well documented subject. Take a look at Kistian Kolb's response here:

.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!