Getting Data In

Splunk License Master down


On latest version 8.0.2, if license master is down will search work or it will wait for 72 hours & then stop?

Labels (1)
Tags (1)
0 Karma


Hi @BRG 

As per Splunk docs 8.0.2 -


if a license slave cannot reach the license master for 72 hours or more, the slave is in violation and search is blocked. A violation still allows indexing to continue. Users can not search the slave in violation until the slave reconnects with the master.


An upvote would be appreciated if it helps!

0 Karma