Installation

Why am I getting message "your license will soon expire" on my search head and how do I remove that?

Afef
Communicator

Hello

I have an indexer with an Enterprise License and I also have a search head. I know that there is no license for the SH, but there is a message on SH "your license will soon expire".

Could you please tell me how to fix that?

Thanks

Labels (3)
0 Karma

somesoni2
Revered Legend

Generally you want to keep License Master role away from indexers and if the SH is the only other server, then License Master should be SH and Indexer should be License Slave. See below link for more information on how to configure License Slave.

http://docs.splunk.com/Documentation/Splunk/6.0.5/Admin/Configurealicenseslave

0 Karma

mdessus_splunk
Splunk Employee
Splunk Employee

Hello Afef,

is there a reason for having your license on the indexer and not in the SH ?
I suggest to put it on the SH and remove it from the Indexer.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...