Is it really a good idea to have the violation limit in a trial version and cripple your own software? A few days ago my boss was trying to show Splunk Enterprise to his boss, but surprise, the search function had stopped working.
It's a trial version, isn't it? To make things worse, we had no idea that a hard limit existed in the first place, at first just thought that the search was somehow broken, and the error message didn't help much either:
Peer SPLUNK's search ended prematurely. Attempting to reconnect and resume.
No reference to the search function being disabled because of license "violations".
This doesn't really seem like a question, and further, there is nothing that the Splunk community can do to help.
If you are unhappy with the free trial, perhaps you could mention that to a sales person.
Well, I guess it was observation / feedback, more than a specific question. However, some questions come to mind: