Installation

Why am I getting message "your license will soon expire" on my search head and how do I remove that?

Afef
Communicator

Hello

I have an indexer with an Enterprise License and I also have a search head. I know that there is no license for the SH, but there is a message on SH "your license will soon expire".

Could you please tell me how to fix that?

Thanks

Labels (3)
0 Karma

somesoni2
Revered Legend

Generally you want to keep License Master role away from indexers and if the SH is the only other server, then License Master should be SH and Indexer should be License Slave. See below link for more information on how to configure License Slave.

http://docs.splunk.com/Documentation/Splunk/6.0.5/Admin/Configurealicenseslave

0 Karma

mdessus_splunk
Splunk Employee
Splunk Employee

Hello Afef,

is there a reason for having your license on the indexer and not in the SH ?
I suggest to put it on the SH and remove it from the Indexer.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...