- Find Answers
- :
- Splunk Administration
- :
- Admin Other
- :
- Installation
- :
- Re: What are the effects of License violation?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I am having trouble understanding whether there are any issues caused by violating a non enforcement license. All Splunk enterprise editions after 6.5 have a non-enforcement license automatically. You get a violation after 5 warnings and indexing continues even after violation of license. Since the there is no enforcement, the search features are still enabled.
I am confused on whether there is any issue for someone simply using Splunk with a violated license and if so what are they?
I know free license can give you a 30 day lockout but enterprise does not seem to have any.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you are using the no-enforcement license, then every license violation is reported to Splunk and the result is that salesmen will eventually begin calling you (and rightly so). That's it. There is literally No Enforcement.
Having said that, I have heard rumors that some people have tested this and that there really is a limit where searching will be blocked to enforce violations, but as far as I know, this is just a rumor (although it would make a fun test).
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you are using the no-enforcement license, then every license violation is reported to Splunk and the result is that salesmen will eventually begin calling you (and rightly so). That's it. There is literally No Enforcement.
Having said that, I have heard rumors that some people have tested this and that there really is a limit where searching will be blocked to enforce violations, but as far as I know, this is just a rumor (although it would make a fun test).
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yeah that is what I thought as well, from the docs and other questions that seems to be the main (and only) issue. Regardless wanted to be sure.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I just installed and started learning SPLUNK. Accidentally and unknowingly as a part of learning, it appears I violated on 3rd day and now I'm completely blocked from using it for a month??. how can someone learn with out any mistakes. This is limiting the ability to adopt the S/W
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Firstly, please don't dig out such old threads. Just ask your question in a new one next time.
Secondly - the trial license is meant for "try and see" so it should be no problem to scrap the whole installation and start anew. The free license is limited to a fixed size because it's free. I don't see any issues here.
If you're suddenly ingesting huge amounts of data into a trial-licensed splunk, for three days, there's something wrong with your trial installation. Maybe contact splunk partner for PoC?
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
