Splunk Enterprise

Incorrect license file uploaded

sweetie
Explorer

hi , we accidentally uploaded Personalized Dev/Test License file instead of Developer license in our splunk emterprise environment. After restarting splunk, we found that it is not acceptiing any user creds and logging on Admin user only. Please let us know how can we fix it given that no users are registered in splunk web now and no one is able to login.

 

Thanks

Labels (2)
0 Karma

sweetie
Explorer

hi @richgalloway - In my case I dont see option to Delete the license.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

You may need to add the correct license before you can remove the incorrect one.

Failing that, there is another untested method.  Go to $SPLUNK_HOME/etc/licenses/ and move the .lic files (except enttrial.lic) to another location.  Restart Splunk and you should be able to add the right license.

---
If this reply helps you, Karma would be appreciated.

sweetie
Explorer

Sure @richgalloway - waiting for developer license file as of now. Will try to upload the same once recieved. 
Also there are no .lic file under the said location- $SPLUNK_HOME/etc/licenses/

Thanks

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

you can try to list those with 

splunk list licenses|egrep '(label|guid|hash)'

then you could remove correct one with it's hash like

splunk remove licenses <hash>

But remember that this command remove this file from filesystem! So if you are using it for real license then backup those files first on some safe place.

r. Ismo

sweetie
Explorer

Thanks @isoutamo  and @richgalloway .

Closing thread- After uploading new Developer license, issue got fixed and users were able to login [probably overrid the Dev/Test Personnel license.

Thanks

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Go to Settings->Licensing, delete the incorrect license and install the correct one.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Celebrating Fast Lane: 2025 Authorized Learning Partner of the Year

At .conf25, Splunk proudly recognized Fast Lane as the 2025 Authorized Learning Partner of the Year. This ...

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...