Hello,
we have a license Splunk, and running into the below error
restricting search to internal indexes only (reason: [DISABLED_DUE_TO_VIOLATION,0])
how do i contact the Splunk team to get by license reset temporarily?
I do not have the email or login portal of the account holder who initially created the Splunk cluster to contact the support
If you don't have the license owner's info any longer then do you know anyone with entitlement to open a support case? If not then it's like putting your system's root password into a safe and then losing the safe. Things become a lot harder.
Contact your Splunk account team for assistance. They can work with Support to assign a new license owner. They may even be able to get a license reset key for you.