Getting Data In

Splunk License Master down

BRG
Engager

On latest version 8.0.2, if license master is down will search work or it will wait for 72 hours & then stop?

Tags (1)
0 Karma

venkatasri
SplunkTrust
SplunkTrust

Hi @BRG 

Edit by mod to point to latest documentation:
https://docs.splunk.com/Documentation/Splunk/latest/Admin/Aboutlicenseviolations#Violations_due_to_b...

 

 

if a license slave cannot reach the license master for 72 hours or more, the slave is in violation and search is blocked. A violation still allows indexing to continue. Users can not search the slave in violation until the slave reconnects with the master.

 

 --------------------------------------------------------

An upvote would be appreciated if it helps!

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...