Splunk Enterprise

License Expiration Issue While Running SPL on Splunk 10 Beta with SentinelOne App

yash7172
New Member

Hi Splunk Community,

I recently installed and configured the SentinelOne app on a Splunk 10 Beta environment. The setup went smoothly, but when I try to run any SPL queries, I’m encountering a license expiration message.

I'm unsure whether this is related to the Splunk 10 Beta version itself or a misconfiguration. Has anyone else faced this issue in the beta environment, or is there any known limitation regarding licensing in this version?

Appreciate any insights or guidance.

Labels (2)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

Don't go for the 10 beta unless you're gonna do beta testing. Just spin up a normal 9.x environment and try there.

Unless you're testing for compatibility between the app and Spiunk 10...

Anyway, as far as I remember, there was a beta license file somewhere around the place where you downloaded the installer from. You must use that file, not your "general" license. And I think there is no free/trial license tier with the beta release at this time.

0 Karma

isoutamo
SplunkTrust
SplunkTrust

As already said, don’t use any beta versions unless you are testing how that beta is working and you are eager to give feedback to splunk!

Currently there are several beta 10 versions out. All those have separate testing periods and different features to test. You can see those versions on voc.splunk.com and there are instructions how you should install current license or is it already included into installation package. Also if there are several versions of independent beta, normally you must uninstall old and then starting from scratch with newer one.

0 Karma

livehybrid
Super Champion

Hi @yash7172 

Can you confirm that you have installed the beta license for Splunk 10? Non-beta licenses do not work on beta versions. 
Was this a fresh install or an upgrade from non-beta version? 
Please can you share a screenshot of the license warning or exact log messages? I’m fairly sure this isn’t specifically related to the SentinelOne app as I don’t think this has its own license. 
What does the license usage page show? What is the expiry and ingest limit on the license? I think earlier versions of the beta license expired at the end of June but I haven’t checked for a while to see if this was extended!

 

🌟 Did this answer help you? If so, please consider:

    • Adding karma to show it was useful
    • Marking it as the solution if it resolved your issue
    • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...