Installation

Is there a CLI command that will return license info?

Mick
Splunk Employee
Splunk Employee

Is there a CLI command that I can use to determine what kind of license is installed on an instance?

I'd like to know if it's a Trial or an Enterprise license, the volume, the lifetime and expiry date and maybe even the license string.

Tags (3)
1 Solution

Mick
Splunk Employee
Splunk Employee

This will give you most of what you're looking for -

./splunk show license

On my test Splunk instance, this returns:

Your session is invalid.  Please login.
Splunk username: admin
Password: 
Current Daily Usage Amount:     0
Expiration date:        2010-04-22T14:42:04-0700
Expiration State:       7
License level:          100 MB
Product:            Enterprise
License violations:         
        2010-04-20T07:22:20-0700 License violation #5
        2010-04-20T00:06:36-0700 License violation #4
        2010-04-19T00:00:56-0700 License violation #3
        2010-04-18T00:03:50-0700 License violation #2
        2010-04-17T00:03:20-0700 License violation #1
Max Violations:         5
Peak usage:             1563 MB
Days remaining:         2 day(s)
Violation Period:       30

View solution in original post

chrisrex
Explorer

There are new ways you can alert based on violations: Community:TroubleshootingIndexedDataVolume

0 Karma

mmletzko
Path Finder

Yeah, what gives with removing this command? I had a nice shell script setup to alert us via email of violations, and being clear of violations - and it was based on the results of the "Show license" command. There doesn't seem to be an equivalent.

Is there a log file to which violations are logged?

tmartin
Splunk Employee
Splunk Employee

4.2 update...

[root@funkytown ~]# /opt/splunk/bin/splunk version

Splunk 4.2.1 (build 98164)

[root@funkytown ~]# /opt/splunk/bin/splunk show license

This command is deprecated.

[root@funkytown ~]#

LCM
Contributor

Since this question has been answered already, I guess, you'd better place that comment/answer in a new thread. Maybe someone has a solution!

0 Karma

Mick
Splunk Employee
Splunk Employee

This will give you most of what you're looking for -

./splunk show license

On my test Splunk instance, this returns:

Your session is invalid.  Please login.
Splunk username: admin
Password: 
Current Daily Usage Amount:     0
Expiration date:        2010-04-22T14:42:04-0700
Expiration State:       7
License level:          100 MB
Product:            Enterprise
License violations:         
        2010-04-20T07:22:20-0700 License violation #5
        2010-04-20T00:06:36-0700 License violation #4
        2010-04-19T00:00:56-0700 License violation #3
        2010-04-18T00:03:50-0700 License violation #2
        2010-04-17T00:03:20-0700 License violation #1
Max Violations:         5
Peak usage:             1563 MB
Days remaining:         2 day(s)
Violation Period:       30

Lowell
Super Champion

New command is splunk list licenses

twinspop
Influencer

Doesn't work with Splunk 4.2.1

0 Karma

jrodman
Splunk Employee
Splunk Employee

This is cool, if only I ever knew!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...