Why am I getting message "your license will soon expire" on my search head and how do I remove that?



I have an indexer with an Enterprise License and I also have a search head. I know that there is no license for the SH, but there is a message on SH "your license will soon expire".

Could you please tell me how to fix that?


Labels (3)
0 Karma

Revered Legend

Generally you want to keep License Master role away from indexers and if the SH is the only other server, then License Master should be SH and Indexer should be License Slave. See below link for more information on how to configure License Slave.

0 Karma

Splunk Employee
Splunk Employee

Hello Afef,

is there a reason for having your license on the indexer and not in the SH ?
I suggest to put it on the SH and remove it from the Indexer.

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!