How to reset a license warning to avoid a license violation?

[templier]

Hello all.
We have a little trouble with our license.

We paid for a new license and are waiting for a new file at the moment. But our current license is expired this morning and now i have a message in license manager, "Correct by midnight to avoid violation".

And i understand that a new license i can't be installed before this time.

What can you advise in this case?
Turn off the server, or temporarily stop collecting logs to not get an error exceeding the license?
Question is urgent 🙂
Thanks.

[gcusello]

Hi templier,
I think that you have a term license otherwise there isn't a problem.

the best way is to ask to the people that sold you Splunk to have a trial license waiting for the new one.

Every way how long you have to wait for the new license?, if you will receive it in two days you will not go in violation: you'll not have a violation tomorrow and a day after tomorrow, but the third day (two day after tomorrow.
And If you go in violation you can have a reset license by the same channel.

Bye.
Giuseppe

[daniel_augustyn · Accepted solution]

You can always ask your Splunk sales person to give you a key to reset these warnings. Just tell him you are waiting for a new license and need to reset the current warning.

[templier]

Yep, it's a really good answer, but trouble in that work day is over, and my account in splunk a cant a new Case with this trouble.

[templier]

Yes, it's a right path in this trouble.

[lukejadamec]

You don't need a new case for this. Just contact your Splunk rep. The turn around time for a license reset even after hours is typically pretty quick. If you're going through a third party, then by pass them as quickly as possible - they are only useful for sales.
Regardless, Do Not turn off your indexers because you may end up losing data. The indexes will continue to index data - it is the search capability that is stopped when you have license violations.