Security

license expired after upgrade to 4.2

deyeo
Path Finder

i've upgraded my splunk 4.1 heavy forwarder to 4.2.2 more than 60days ago. this splunk also has PDF Report Server App running. Splunk web is also disabled.

Recently, when i start my splunk, i noticed this message:

"Your license is expired. Please login as an administrator to update the license."

Please advise what i should do?

~/bin/splunk list licenser-pools

    auto_generated_pool_download-trial
            description:auto_generated_pool_download-trial
            quota:MAX
            slaves:
                    *
            stack_id:download-trial
            used_bytes:0

    auto_generated_pool_forwarder
            description:auto_generated_pool_forwarder
            quota:MAX
            slaves:
                    *
            stack_id:forwarder
            used_bytes:0

    auto_generated_pool_free
            description:auto_generated_pool_free
            quota:MAX
            slaves:
                    *
            stack_id:free
            used_bytes:0
Tags (1)
1 Solution

chicodeme
Communicator

add to server.conf seems like a solution..

[license]
active_group = Forwarder

or use the gui in 4.2 to switch to free license:
login the UI, go to manager > licensing
change the license group to "free license"
restart

View solution in original post

chicodeme
Communicator

add to server.conf seems like a solution..

[license]
active_group = Forwarder

or use the gui in 4.2 to switch to free license:
login the UI, go to manager > licensing
change the license group to "free license"
restart

chicodeme
Communicator

add to server.conf seems like a solution..

[license]
active_group = Forwarder

0 Karma

chicodeme
Communicator

In 4.2 to switch to free license:

login the UI, go to manager > licensing
change the license group to "free license"
restart

I'm looking for cmdline way to do it still..

0 Karma

Drainy
Champion

Have you actually purchased a license at some point in the past?
If so was it an annual license or a perpetual, the latter would require an updated license to work with a new version of Splunk.
If it is the free one then it is entirely possible that your license has just reached the end of its lifetime.
To reset the splunkd to a free version as per the following URL (I haven't personally tried this so backup any files you move or change)
http://splunk-base.splunk.com/answers/93/how-do-i-get-a-free-license

By Matt (From above URL)

To switch to a Free License via the
command line:

Copy the
$SPLUNK_HOME/etc/splunk-free.license
to $SPLUNK_HOME/etc/splunk.license
Restart Splunk (./splunk restart)

Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...