we've recently migrated to a distributed deployment, with a licensing server. a recent surge in events caused licensing to be exceeded, and we received a reset license which was installed on the license master. however, we still cant search on the shc due to licensing errors.
after installing a license on the master, what is needed to enable searching across the cluster?
You must point all your servers to use that same license master. More info how to do it can found from here: https://docs.splunk.com/Documentation/Splunk/8.0.1/Admin/Distdeploylicenses.
In some cases there have been an issue with old perpetual licenses and then you should create a case to Splunk support.
You need to configure your search heads to be license slaves, and point them to the license master.
Settings > Licensing > Change to Slave > Designate a different Splunk instance as the master license server