Hi,
i have an 500 internal server error when accessed licensing page, and this is show on the log:
Hello, I am having the same issue, and I understood that it could be due to a license violation. I just found out that even when a license peer can't connect to license manager for 72 hours it will cause warnings (I m not sure yet if for a single error message = a warning or not!!)
check your internal logs (if you still have them) for this:
index=_internal component=LMTracker ("failed to send rows" OR "unable to connect")
then i understood that the warning/violation will be reset after 30days (this period could be different too!), so I am assuming that after 30days of the violation, the issue will disappear!
The other possibility is to change the file: /opt/splunk/share/splunk/search_mrsparkle/templates/licensing/overview.html
and comment the section where it checks for the pool quota violation (I haven't tried that yet).
Hi
If you cannot connect to LM from peer, you have 72h time to fix the situation. After that you cannot do normal searches before you fix it. There is no automatic timeout for getting it work again!
You must check that you have connection from your peer to LM usually it use port 8089. Also you must have same pass4SymmKey on generic stanza on peer and LM to get connection to work.
If physical connection between host is working then just look from LM's _internal log what is the reason why it didn't accept peers connection.
r. Ismo