Splunk Enterprise

How do I contact the Splunk team to get by license reset temporarily?

New Member


   we have a license Splunk, and running into the below error

restricting search to internal indexes only (reason: [DISABLED_DUE_TO_VIOLATION,0])

how do i contact the Splunk team to get by license reset temporarily?

I do not have the email or login portal of the account holder who initially created the Splunk cluster to contact the support

Labels (1)
0 Karma


If you don't have the license owner's info any longer then do you know anyone with entitlement to open a support case?  If not then it's like putting your system's root password into a safe and then losing the safe.  Things become a lot harder.

Contact your Splunk account team for assistance.  They can work with Support to assign a new license owner.  They may even be able to get a license reset key for you.

If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...