My Dev Splunk license was reset but still see a message that I am exceeding limits...

[packet_hunter]

How long does it take after a Dev License reset before the warning messages go away. I am unlocked and able to search again, however I still receive this warning message after a restart.

License Manager: Licensing warnings will be generated today. See License Manager for details. Learn more.

I disabled all add-ons/ scripts/ apps (except Search and Reporting) I should not be ingesting anything at the moment.

Any advice on this appreciated.

Thank you

[MuS · Accepted solution]

Hi packet_hunter,

the message should go away immediately for old warnings.
But if you just breached the license after the reset key was applied the warning message will stay until midnight.

Hope this helps ...

cheers, MuS

[packet_hunter]

It appears that my reset did not clear that day's earlier breach because I used:

index=_internal source=*license_usage.log type=usage  | eval GB = b/1024/1024/1024 | eval st_idx = st.": ".idx | timechart span=1d sum(GB) as "Total GB used" by st_idx

to look for all data sources with any volume. When I found anything sending data I shut it down until I saw nothing coming in. I believe everything was disabled/shutdown before the reset. It seems that my reset did not clear everything from earlier that day and needed a nightly refresh. So I am not sure the breach that occurs the day of the reset is automatically removed.

Well at least it is cleared now. Thx

[aalbaker]

I'm having the same issue.