Installation

How to resolve frequent license issue errors such as "In handler 'localslave': editTracker failed" on Search Head Cluster?

sivapuvvada
Path Finder

We have Search Head cluster with 3 nodes. We try to point all these nodes to my License master .
When I tried to do as the master Uri from the SH members/Deployer UI it showing error message:

"Bad Request — In handler 'localslave': editTracker failed, reason='WARN: path=/masterlm/usage: invalid signature on request from ip=x.x.xx.xx " 

I have manually updated the same from CLI in server.conf, it worked but slaves are not contacting frequently license master . After 24 hrs i am getting license expired message on Splunk Web. Again, I have removed the master uri stanza and placed the same back and restarted. it worked

How to fix this one ?

Also I have done telnet from my search head members to license master and it connected without any issues.

Labels (3)
0 Karma
1 Solution

sivapuvvada
Path Finder

The root cause for the issue is pass4SymmKey present in server.conf

[general]
pass4SymmKey = test
serverName = x.x.x.x.x

When ever any server you tried to point to licensemaster , The LM pass4symmkey should be same as the server which you want to point .

this one implemented in prod environment and working fine without any issues .

View solution in original post

sivapuvvada
Path Finder

The root cause for the issue is pass4SymmKey present in server.conf

[general]
pass4SymmKey = test
serverName = x.x.x.x.x

When ever any server you tried to point to licensemaster , The LM pass4symmkey should be same as the server which you want to point .

this one implemented in prod environment and working fine without any issues .

hunters_splunk
Splunk Employee
Splunk Employee

Hi sivapuvvada,

Please try running the following CLI command on each slave:

splunk edit licenser-localslave -master_uri https://{Lic_Master:mgmt_port}

To check the list of license slaves, run this command on the license master:

splunk list licenser-slaves

Hope this helps. Thanks!
Hunter

0 Karma

sivapuvvada
Path Finder

Hi Hunter ,

I tried as you suggested but got the below error message .

In handler 'localslave': editTracker failed, reason='WARN: path=/masterlm/usage: invalid signature on request from ip=x.x.xx.xxx

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...