Installation

How to resolve frequent license issue errors such as "In handler 'localslave': editTracker failed" on Search Head Cluster?

sivapuvvada
Path Finder

We have Search Head cluster with 3 nodes. We try to point all these nodes to my License master .
When I tried to do as the master Uri from the SH members/Deployer UI it showing error message:

"Bad Request — In handler 'localslave': editTracker failed, reason='WARN: path=/masterlm/usage: invalid signature on request from ip=x.x.xx.xx " 

I have manually updated the same from CLI in server.conf, it worked but slaves are not contacting frequently license master . After 24 hrs i am getting license expired message on Splunk Web. Again, I have removed the master uri stanza and placed the same back and restarted. it worked

How to fix this one ?

Also I have done telnet from my search head members to license master and it connected without any issues.

Labels (3)
0 Karma
1 Solution

sivapuvvada
Path Finder

The root cause for the issue is pass4SymmKey present in server.conf

[general]
pass4SymmKey = test
serverName = x.x.x.x.x

When ever any server you tried to point to licensemaster , The LM pass4symmkey should be same as the server which you want to point .

this one implemented in prod environment and working fine without any issues .

View solution in original post

sivapuvvada
Path Finder

The root cause for the issue is pass4SymmKey present in server.conf

[general]
pass4SymmKey = test
serverName = x.x.x.x.x

When ever any server you tried to point to licensemaster , The LM pass4symmkey should be same as the server which you want to point .

this one implemented in prod environment and working fine without any issues .

hunters_splunk
Splunk Employee
Splunk Employee

Hi sivapuvvada,

Please try running the following CLI command on each slave:

splunk edit licenser-localslave -master_uri https://{Lic_Master:mgmt_port}

To check the list of license slaves, run this command on the license master:

splunk list licenser-slaves

Hope this helps. Thanks!
Hunter

0 Karma

sivapuvvada
Path Finder

Hi Hunter ,

I tried as you suggested but got the below error message .

In handler 'localslave': editTracker failed, reason='WARN: path=/masterlm/usage: invalid signature on request from ip=x.x.xx.xxx

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...