Monitoring Splunk

I violated my license and now I can't search. Read about reset license in one of the answers. Where can I get it?

elusive
Splunk Employee
Splunk Employee

Splunk can provide a one time forgiveness reset license key that is valid for 24 hours. Submit a case here and provide the following information:

  1. The email address your enterprise license key was issued to? (Look into your $SPLUNK_HOME/etc/splunk.license for the email).

  2. The Splunk version you need reset license key to be issued to?

NOTE: Reset license key cannot be issued for Trial or Free License. It is only applicable for Enterprise License.

Tags (1)
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

You need to contact Splunk Support to obtain a reset license. You may use the web site to open a ticket at the appropriate priority level, or call the Support phone line. You should be listed with Splunk Support as one of the authorized support contacts.

View solution in original post

imetrik
Engager

It's sad... I was trying to implement some RegEx to break the content down by host/sourcetype...

I had to clean the eventdata a couple of times...

And now guess what? Licence violation! I feel like a bad boy!

Ok... Maybe I should have played with smaller logs files...

Maybe when you do a clean eventdata it should take in consideration that you will need to reindex everything...

I just read that we cannot reset a free licence. What can I do a this point? I cannot upgrade to a commercial license yet. I'm not convinced that it will be useful in my day to day tasks.

Any tips, comments, shame on me? Thanks, -P

Jason
Motivator

If you're just testing, you could install a new instance and test with new data. Also, remember the licensing structure: x times busting your license in y days. This is checked ONCE A DAY. So if you need to import a lot of logs all at once for testing, that's why the busts are there. Do all your archive importing in one day, and that's one bust.

0 Karma

the_wolverine
Champion

If you contact your account rep you will be able to speed up your request. Support funnels requests for reset licenses back to the account rep before issuing the license (or not.)

Or, cc your account rep on the support request for a reset license.

gkanapathy
Splunk Employee
Splunk Employee

You need to contact Splunk Support to obtain a reset license. You may use the web site to open a ticket at the appropriate priority level, or call the Support phone line. You should be listed with Splunk Support as one of the authorized support contacts.

Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...