Getting Data In

How to fix this slave indexed data/sourcetype without a corresponding license pool

klim
Path Finder

I created a search head and an indexer and the search head is acting as the master license server. I added the tutorial data to the search head https://docs.splunk.com/Documentation/Splunk/8.2.1/SearchTutorial/GetthetutorialdataintoSplunk 

The indexer is associated with the master license server. On the search head I am getting the license error of 1 orphaned indexer reported by 1 indexer and the message is "this slave indexed data/sourcetype(s) without a corresponding license pool" and the indexer is the master license server and category is orphan_slave. 

I read in other answers related to this that the sourcetypes need to be in a license pool. I added the two host of the search head and indexer to the license pool via the specific indexers option however I am still getting the same error. Will this error go away or am I still in violation?

Labels (2)
Tags (1)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...