I have a FREE license, yet I get the error "Your Splunk license expired or you have exceeded your license limit too many times". It appears you're trying to ensure that temporary bursts over the limit are still processed, but this just means that I lose search access entirely after a few days, which is worse (then I need a silly thing called a "reset license"!).
How about an alternative FREE license which strictly enforces the limit, but never ever denies you access to searching your data? This is far more "common sense".
Mike, may I know which Splunk version are you using? And on which platform?
Yes, there's both -- mine is "perpetual free", except it doesn't seem to be REALLY be perpetual, it's revoked if you exceed the limits.
isnt there a "eval" and a "perpetual free" license?