Splunk Enterprise

License Expiration Issue While Running SPL on Splunk 10 Beta with SentinelOne App

yash7172
New Member

Hi Splunk Community,

I recently installed and configured the SentinelOne app on a Splunk 10 Beta environment. The setup went smoothly, but when I try to run any SPL queries, I’m encountering a license expiration message.

I'm unsure whether this is related to the Splunk 10 Beta version itself or a misconfiguration. Has anyone else faced this issue in the beta environment, or is there any known limitation regarding licensing in this version?

Appreciate any insights or guidance.

Labels (2)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

Don't go for the 10 beta unless you're gonna do beta testing. Just spin up a normal 9.x environment and try there.

Unless you're testing for compatibility between the app and Spiunk 10...

Anyway, as far as I remember, there was a beta license file somewhere around the place where you downloaded the installer from. You must use that file, not your "general" license. And I think there is no free/trial license tier with the beta release at this time.

0 Karma

isoutamo
SplunkTrust
SplunkTrust

As already said, don’t use any beta versions unless you are testing how that beta is working and you are eager to give feedback to splunk!

Currently there are several beta 10 versions out. All those have separate testing periods and different features to test. You can see those versions on voc.splunk.com and there are instructions how you should install current license or is it already included into installation package. Also if there are several versions of independent beta, normally you must uninstall old and then starting from scratch with newer one.

0 Karma

livehybrid
Super Champion

Hi @yash7172 

Can you confirm that you have installed the beta license for Splunk 10? Non-beta licenses do not work on beta versions. 
Was this a fresh install or an upgrade from non-beta version? 
Please can you share a screenshot of the license warning or exact log messages? I’m fairly sure this isn’t specifically related to the SentinelOne app as I don’t think this has its own license. 
What does the license usage page show? What is the expiry and ingest limit on the license? I think earlier versions of the beta license expired at the end of June but I haven’t checked for a while to see if this was extended!

 

🌟 Did this answer help you? If so, please consider:

    • Adding karma to show it was useful
    • Marking it as the solution if it resolved your issue
    • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing.

0 Karma
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...