Searching is disabled due to license violation, even after we upgraded the license. How to re-enable searching?

[dritjon]

Splunk search was disabled because we exceeded the quote for 45 days. So we bought another license to add 10GB to our license. Applied the license fine.

Yet still I cant search due to violation.

I restarted the license manager server, the indexers but nothing.

I'm under the license limit now, what do I have to do to enable searching again?

[isoutamo]

Hi

You are needing separate "reset" license for get rid of license violation. Just contact your Splunk Support and they will generate it for you.

r. Ismo

[dritjon]

Is that the only way?

Splunk support takes more than 10 days to answer us

[isoutamo]

I'm afraid that this is still the quickest way. 

Try to phone to them and you should get it quite quick. Usually only hours or even less. If you create a P1 ticket (as splunk is "unusable") they should answer to you quite soon.

r. Ismo