Installation

Issue with splunk reset license

keerthana_k
Communicator

Hi,

We have a distributed Splunk deployment with a license master and 5 indexers connecting to it. We have recently added a fixed sourcetype enterprise license. After that we found that indexers were not added to the pool automatically. Due to this, we faced 5 license violations. We obtained the Splunk reset license and applied it on the system. Now the search functionality has been restored. However, we found that data got ingested into the reset license which does not have any volume and hence once more license warnings have started appearing. We deleted the reset license and manually added the indexers to the pool under the fixed sourcetype enterprise license but we find that the indexing volume is not updated in the pool.

Can anybody help me with this issue.

Thanks in advance,
Keerthana

0 Karma
1 Solution

strive
Influencer

Hi Keerthana,

If your fixed sourcetype license is wildcard based then you should have Splunk Version >= 6.3. It would be nice starting point to check your Splunk version and then upgrade it if necessary.

When the correct licenses are not available the indexers will be added under the pool whichever seems to fit the bill 🙂
In your case it was Reset License as it would not have restrictions.

Check Splunk Version and then proceed further.

Regards,
Strive

View solution in original post

0 Karma

strive
Influencer

Hi Keerthana,

If your fixed sourcetype license is wildcard based then you should have Splunk Version >= 6.3. It would be nice starting point to check your Splunk version and then upgrade it if necessary.

When the correct licenses are not available the indexers will be added under the pool whichever seems to fit the bill 🙂
In your case it was Reset License as it would not have restrictions.

Check Splunk Version and then proceed further.

Regards,
Strive

0 Karma
Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...