Splunk Enterprise

Incorrect license file uploaded

sweetie
Explorer

hi , we accidentally uploaded Personalized Dev/Test License file instead of Developer license in our splunk emterprise environment. After restarting splunk, we found that it is not acceptiing any user creds and logging on Admin user only. Please let us know how can we fix it given that no users are registered in splunk web now and no one is able to login.

 

Thanks

Labels (2)
0 Karma

sweetie
Explorer

hi @richgalloway - In my case I dont see option to Delete the license.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

You may need to add the correct license before you can remove the incorrect one.

Failing that, there is another untested method.  Go to $SPLUNK_HOME/etc/licenses/ and move the .lic files (except enttrial.lic) to another location.  Restart Splunk and you should be able to add the right license.

---
If this reply helps you, Karma would be appreciated.

sweetie
Explorer

Sure @richgalloway - waiting for developer license file as of now. Will try to upload the same once recieved. 
Also there are no .lic file under the said location- $SPLUNK_HOME/etc/licenses/

Thanks

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

you can try to list those with 

splunk list licenses|egrep '(label|guid|hash)'

then you could remove correct one with it's hash like

splunk remove licenses <hash>

But remember that this command remove this file from filesystem! So if you are using it for real license then backup those files first on some safe place.

r. Ismo

sweetie
Explorer

Thanks @isoutamo  and @richgalloway .

Closing thread- After uploading new Developer license, issue got fixed and users were able to login [probably overrid the Dev/Test Personnel license.

Thanks

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Go to Settings->Licensing, delete the incorrect license and install the correct one.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...