Installation

Splunk stop to index when license violate once

Path Finder

I have just installed splunk (4.2.2) yesterday and the license is violate once a time, but I find splunk stop to index any log after it show up license exceeded. I would like anyone have same situation and is it a bug?

Tags (1)
0 Karma

Contributor

just a brainwave, if you set an alert on the lic violation and fire of a script that set indexes.conf, restart splunk action?

0 Karma

Splunk Employee
Splunk Employee

Splunk does not stop indexing because of license violations, no matter how many. It is possible that other things caused this, such as hitting the minimum free disk space limit.

0 Karma

Motivator

If it actaully stops indexing, then it's definitely a bug, assuming there isn't caused by something else. They have always said that only searching would be affected. What is being logged in $SPLUNK_HOME/var/log/splunk/splunkd.log?