How to correcting pool_violated_peer_count ?

[chrbar01]

Hi,

We run Splunk Enterprise 9.0.0 and we forgot to add an indexer inside a license pool (7 orphan_peer licensing alerts).
Now we obtain the error message "have exceeded your license limit too many times" on this indexer.

We desassociated and re-associated this indexer in the pool, but the error message stays present.
Could you tell me how to correcting pool_violated_peer_count ?

We get the licensing alerts "Correct by midnight to avoid violation".
Does it mean this license violation/limit will be remove today after midnight?

20220822-0844_2.jpg

Regards,
Chris

[richgalloway · Accepted solution]

Contact Splunk Support and ask them for a Reset license.