When I look at license usage no split I am well below my license limit. When I split by index there is an index called pool size that starts at our license limit every day. So, as soon as we consume any data we get a license violation.
This turned out to be a problem with the license name and the license label. I had two entries with the same label so I thought my new Splunk instance was added to the license group. I have to add the new instance to the licensing bucket to resolve the issue.
This turned out to be a problem with the license name and the license label. I had two entries with the same label so I thought my new Splunk instance was added to the license group. I have to add the new instance to the licensing bucket to resolve the issue.
"Pool size" should show the size of your pool, I doubt there is an index called that. You should see that as a dashed line rather than columns, showing where the limit for that pool is.
