Splunk License Error After Proper Licensing

[adidibra]

Hello,

I have implemented an indexer cluster with 16 nodes and attached the license after the cluster was up and running for approx 20 days.

After applying the 1TB per day license, 15 nodes have been connected successfully with the license manager but only 1 is having issues and generation the following alert

[idx001] Streamed search execute failed because: Error in 'litsearch' command: Your Splunk license expired or you have exceeded your license limit too many times

I have tried some restarts and re-connection with the license manager from this node but still the message persists. Also in the license manager this is the only indexer missing even though the IP/DNS connectivity works

Is there any possibility to force re-connection from this indexer?

[adidibra]

Hello,

Good call. Someone changed the [general] pass and I was chasing my tail.

Thanks

[richgalloway · Accepted solution]

Check splunkd.log on the indexer to see if anything is preventing it from connecting to the LM.