Getting Data In

Splunk License Master down


On latest version 8.0.2, if license master is down will search work or it will wait for 72 hours & then stop?

Labels (1)
Tags (1)
0 Karma


Hi @BRG 

As per Splunk docs 8.0.2 -


if a license slave cannot reach the license master for 72 hours or more, the slave is in violation and search is blocked. A violation still allows indexing to continue. Users can not search the slave in violation until the slave reconnects with the master.


An upvote would be appreciated if it helps!

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.