License usage issue



I can do the search using index and internal, but when I do index as OS, I am getting the following error message. Our usage is only 20% and getting this error message. Any idea?

Eerror in 'litsearch' command: Your Splunk license expired or you have exceeded your license limit too many times. Renew your Splunk license by visiting or calling 866.GET.SPLUNK.

Search results may be incomplete: the search process on the local ended prematurely. Please check the local peer log, such as $SPLUNK_HOME/var/log/splunk/splunkd.log and as well as the search.log for the particular search.

The search job has failed due to an error. You may be able view the job in the Job Inspector.

Tags (1)
0 Karma

Revered Legend

As indicated by Splunk, your license has expired (may be a trial version) or you've more than 5 license limit violation in last 30 days so searching of your custom indexes (non-internal ) is disabled. YOu can still search _internal data.

0 Karma
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...