Splunk Enterprise

Incorrect license file uploaded

sweetie
Explorer

hi , we accidentally uploaded Personalized Dev/Test License file instead of Developer license in our splunk emterprise environment. After restarting splunk, we found that it is not acceptiing any user creds and logging on Admin user only. Please let us know how can we fix it given that no users are registered in splunk web now and no one is able to login.

 

Thanks

Labels (2)
0 Karma

sweetie
Explorer

hi @richgalloway - In my case I dont see option to Delete the license.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

You may need to add the correct license before you can remove the incorrect one.

Failing that, there is another untested method.  Go to $SPLUNK_HOME/etc/licenses/ and move the .lic files (except enttrial.lic) to another location.  Restart Splunk and you should be able to add the right license.

---
If this reply helps you, Karma would be appreciated.

sweetie
Explorer

Sure @richgalloway - waiting for developer license file as of now. Will try to upload the same once recieved. 
Also there are no .lic file under the said location- $SPLUNK_HOME/etc/licenses/

Thanks

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

you can try to list those with 

splunk list licenses|egrep '(label|guid|hash)'

then you could remove correct one with it's hash like

splunk remove licenses <hash>

But remember that this command remove this file from filesystem! So if you are using it for real license then backup those files first on some safe place.

r. Ismo

sweetie
Explorer

Thanks @isoutamo  and @richgalloway .

Closing thread- After uploading new Developer license, issue got fixed and users were able to login [probably overrid the Dev/Test Personnel license.

Thanks

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Go to Settings->Licensing, delete the incorrect license and install the correct one.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...