Splunk Enterprise

License Expiration Issue While Running SPL on Splunk 10 Beta with SentinelOne App

yash7172
New Member

Hi Splunk Community,

I recently installed and configured the SentinelOne app on a Splunk 10 Beta environment. The setup went smoothly, but when I try to run any SPL queries, I’m encountering a license expiration message.

I'm unsure whether this is related to the Splunk 10 Beta version itself or a misconfiguration. Has anyone else faced this issue in the beta environment, or is there any known limitation regarding licensing in this version?

Appreciate any insights or guidance.

Labels (2)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

Don't go for the 10 beta unless you're gonna do beta testing. Just spin up a normal 9.x environment and try there.

Unless you're testing for compatibility between the app and Spiunk 10...

Anyway, as far as I remember, there was a beta license file somewhere around the place where you downloaded the installer from. You must use that file, not your "general" license. And I think there is no free/trial license tier with the beta release at this time.

0 Karma

isoutamo
SplunkTrust
SplunkTrust

As already said, don’t use any beta versions unless you are testing how that beta is working and you are eager to give feedback to splunk!

Currently there are several beta 10 versions out. All those have separate testing periods and different features to test. You can see those versions on voc.splunk.com and there are instructions how you should install current license or is it already included into installation package. Also if there are several versions of independent beta, normally you must uninstall old and then starting from scratch with newer one.

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @yash7172 

Can you confirm that you have installed the beta license for Splunk 10? Non-beta licenses do not work on beta versions. 
Was this a fresh install or an upgrade from non-beta version? 
Please can you share a screenshot of the license warning or exact log messages? I’m fairly sure this isn’t specifically related to the SentinelOne app as I don’t think this has its own license. 
What does the license usage page show? What is the expiry and ingest limit on the license? I think earlier versions of the beta license expired at the end of June but I haven’t checked for a while to see if this was extended!

 

🌟 Did this answer help you? If so, please consider:

    • Adding karma to show it was useful
    • Marking it as the solution if it resolved your issue
    • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing.

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...