Deployment Architecture

Why am I still running into License Master Timeouts and Slowness after upgrading to 6.5.6 to resolve SPL-134638?

alee_splunk
Splunk Employee
Splunk Employee

I upgraded my License Master to 6.5.6 to ensure I was not running into SPL-134638

https://docs.splunk.com/Documentation/Splunk/6.5.4/ReleaseNotes/KnownIssues

However, I am still running into my License Master timing out with read timeouts and poor performance

1 Solution

alee_splunk
Splunk Employee
Splunk Employee

Run the following command on the LM in Search and Reporting
| rest splunk_server=local /services/licenser/messages

If this comes back with thousands and thousands of results, please contact Support for a License Reset Key which will clear out the messages which are most likely Warnings and should lead to better performance

View solution in original post

alee_splunk
Splunk Employee
Splunk Employee

Run the following command on the LM in Search and Reporting
| rest splunk_server=local /services/licenser/messages

If this comes back with thousands and thousands of results, please contact Support for a License Reset Key which will clear out the messages which are most likely Warnings and should lead to better performance

kurtzschmitt
Engager

thanks alee..this solution worked for me as well. rest search returned 3000 messages related to violations/warnings. called splunk and got a reset key even though we have no enforcement and applied via the cli (since I couldn't access license page without it timing out) and restarted splunk. license page now loads in 5 seconds vs timing out in 10 minutes. we've had multiple cases open on this going back a couple years and nothing fixed the issue until now.

0 Karma

alee_splunk
Splunk Employee
Splunk Employee

Great to hear that helped @kurtzschmitt !

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...