Error in 'litsearch' command: Your Splunk license expired or you have exceeded your license limit too many times. Renew

[rahul2gupta]

Hi @gcusello ,

We are getting an error  "[aapxxxx01] Streamed search execute failed because: Error in 'litsearch' command: Your Splunk license expired or you have exceeded your license limit too many times. Renew your Splunk license by visiting www.splunk.com/store or calling 866.GET.SPLUNK."

I checked our daily usage limit and we have been violating our daily usage(62 GB)  limit from one week.

Could you please help to fix this.

[gcusello]

Hi @rahul2gupta,

if you're in license violation, there isn't anything I can do, you have only to call your Splunk channel manager and ask a license unlock.

Ciao.

Giuseppe

[rahul2gupta]

Hi @gcusello ,

I contacted with splunk support and they advised me to follow the following steps.

+++ 3 easy steps to get search functionality restored +++

1) On the License Master open the License Manager interface.
2) Click the Add License Button
3) Apply the reset license

The reset license will be applied to all pools and your searches should no longer be blocked. If you continue to have issues please let us know.

But unfortunately I couldn't able to find 1st step.

Can you please help me with this.

Regards,

Rahul

[gcusello]

Hi @rahul2gupta,

i didn't tried but maybe it's possible to copy the Licese Reset on the Master Node and restart Splunk but I think that's more difficoult, you have to access the Master Node by Web GUI!

i don't know what's you problem, but this is an intervene that must be done by the system administrator!

Ciao.

Giuseppe

[General_Talos]

Correct, if your license violated -- connect Splunk Support for new license. 

For more details refer

https://docs.splunk.com/Documentation/Splunk/8.1.1/Admin/Aboutlicenseviolations