Installation

Is there a workaround for avoiding the 30-day violation after exceeding permitted volume usage on Enterprise trial?

HQ5452
Explorer

Hi,

There are three days between the end of my trial and the moment I change my stack from "Splunk Enterprise" to "Splunk Free". During this three days, allowed permitted volume was 0GB, so I exceeded the "5 violations in a rolling 30 day window" permitted.

Is it possible to ignore (or something else) this three days of violation, and allow me to use my Splunk again without having to delay the 30 day window?

Thanks for your help,

JB

Labels (1)
0 Karma

SplunkersRock
Path Finder
0 Karma

HQ5452
Explorer

I didn't want to create an alert on license usage.
Anyway I installed a new instance but i lose indexed data.

0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...