Security

slave had no matching license pool for the data it indexed

rahul29564
New Member

We had 14 indexers under a pool of 2.3TB license.
We added 6 more indexers before 5 days but forget to add it under license pool and it gets 5 violation warning on all 6 new indexers and it was giving below error as below.

[XXXXXXXXX_indexer15] Streamed search execute failed because Error in 'litsearch' command: Your Splunk license expired or you have exceeded your license limit too many times. Renew your Splunk license by visiting www.splunk.com/store or calling 866.GET.SPLUNK.

So now I have added all new 6 Indexer under the 2.3TB pool from UI but still, the error is not going from search head.

0 Karma

nickhills
Ultra Champion

You will need to request a licence reset key from Splunk.

Contact support and explain what has happened and they should be able to send you a new lic which will reset your warning count.

If my comment helps, please give it a thumbs up!
0 Karma
Get Updates on the Splunk Community!

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...

UCC Framework: Discover Developer Toolkit for Building Technology Add-ons

The Next-Gen Toolkit for Splunk Technology Add-on Development The Universal Configuration Console (UCC) ...

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...