Installation
Highlighted

Why am receiving a free license violation after upgrade to 6.1.3 and have never gone above 200MB/day?

New Member

I just upgraded to 6.1.3, and now I am receiving a license violation. Looking at the past 30 days, I have never gone above 200MB/day, and only once touched 30% of daily license quota. I have one pool warning and one pool violation, with a "correct by midnight" message. Today's percentage of license quota sits at slightly over 10% as I type.

Any ideas?

Labels (2)
0 Karma
Highlighted

Re: Why am receiving a free license violation after upgrade to 6.1.3 and have never gone above 200MB/day?

Motivator

One problem that I faced when first using the free licence was that Splunk was indexing (and more to the point re-indexing after rotation) its own log files. This meant that there was growing input day-on-day. When using an Enterprise licence this problem never becomes apparent, because the Splunk logs are a tiny drop in the ocean, but when using the free licence it can take a significant bite out of the available throughput.

0 Karma
Highlighted

Re: Why am receiving a free license violation after upgrade to 6.1.3 and have never gone above 200MB/day?

New Member

Very strange. Today the license violation was downgraded to a warning, and everything is otherwise working.

0 Karma
Highlighted

Re: Why am receiving a free license violation after upgrade to 6.1.3 and have never gone above 200MB/day?

Splunk's internal logs do not count against the license (free or Enterprise).

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.