License slave login screens show trial license verbiage since 4.3 upgrade


Since upgrading to 4.3, all of the license slaves I have show login screens with the "Upgrade to Splunk Enterprise to add alerting, single sign-on blah blah..."

Previously they acknowledged their licensing as dictated by the master. The LM server shows them as slaves and properly licensed.

Today, they all suspended searching for license violations but volume is well below our licensed level. These 2 seem related.

Path Finder

I'm seeing the same behavior after upgrading. I just received my first license warning. Did you ever resolve this?

0 Karma


I've heard nothing, but continue to see the (harmless) behavior on the login screen with at least 4.3.1 systems. I've heard nothing from Splunk regarding the issue.

The issue with license violations was not related, and Splunk support helped me track it down.

0 Karma


The license screen on the slaves also shows good contact to the LM.

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!