Our license expired, and while waiting for the new license, we had license violations every day.
After installing the new license, I didn't log in with the supplied username and password, but logged in with the regular admin credentials. I assume the supplied credentials would have reset the violation count, but the credentials are not working now. I have tried deleting and reinstalling the license, but no luck. Is there any way to reset the counter so that the search is working again?
The error message I am getting is
Error in 'litsearch' command. Your Splunk license expired or you have exceeded your license limit too many times'.
It doesn't clear out the violations. Ugh! It's holding my data hostage!
Follow Step 5 above. Contact Splunk Support and tell them you need a reset license to clear violation.
The only way is to get a
license reset from Splunk. There are 2 ways to get this:
1: Open a support case.
2: Call your Splunk Salesman.
Option #2 is usually way quicker than #1. If this is an emergency, DM me on slack.