Getting Data In

Splunk License Master down


On latest version 8.0.2, if license master is down will search work or it will wait for 72 hours & then stop?

Labels (1)
Tags (1)
0 Karma


Hi @BRG 

As per Splunk docs 8.0.2 -


if a license slave cannot reach the license master for 72 hours or more, the slave is in violation and search is blocked. A violation still allows indexing to continue. Users can not search the slave in violation until the slave reconnects with the master.


An upvote would be appreciated if it helps!

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!