Hi Splunk Community,
I recently installed and configured the SentinelOne app on a Splunk 10 Beta environment. The setup went smoothly, but when I try to run any SPL queries, I’m encountering a license expiration message.
I'm unsure whether this is related to the Splunk 10 Beta version itself or a misconfiguration. Has anyone else faced this issue in the beta environment, or is there any known limitation regarding licensing in this version?
Appreciate any insights or guidance.
Don't go for the 10 beta unless you're gonna do beta testing. Just spin up a normal 9.x environment and try there.
Unless you're testing for compatibility between the app and Spiunk 10...
Anyway, as far as I remember, there was a beta license file somewhere around the place where you downloaded the installer from. You must use that file, not your "general" license. And I think there is no free/trial license tier with the beta release at this time.
As already said, don’t use any beta versions unless you are testing how that beta is working and you are eager to give feedback to splunk!
Currently there are several beta 10 versions out. All those have separate testing periods and different features to test. You can see those versions on voc.splunk.com and there are instructions how you should install current license or is it already included into installation package. Also if there are several versions of independent beta, normally you must uninstall old and then starting from scratch with newer one.
Hi @yash7172
Can you confirm that you have installed the beta license for Splunk 10? Non-beta licenses do not work on beta versions.
Was this a fresh install or an upgrade from non-beta version?
Please can you share a screenshot of the license warning or exact log messages? I’m fairly sure this isn’t specifically related to the SentinelOne app as I don’t think this has its own license.
What does the license usage page show? What is the expiry and ingest limit on the license? I think earlier versions of the beta license expired at the end of June but I haven’t checked for a while to see if this was extended!
🌟 Did this answer help you? If so, please consider:
Your feedback encourages the volunteers in this community to continue contributing.