Error

[SN1]

Hello i am seeing this error
MSE-SVSPLUNKI01] restricting search to internal indexes only (reason: [DISABLED_DUE_TO_GRACE_PERIOD,0])

how to resolve this.

[livehybrid]

Hi @SN1 

How did you get on? Let us know if you need help diagnosing issues connecting to a licenser server (if applicable) or adding a new license.

For more info on how to add a new license check out https://docs.splunk.com/Documentation/Splunk/9.4.0/Admin/Installalicense

Please let me know how you get on and consider adding karma to this or any other answer if it has helped.
Regards

Will

[kiran_panchavat]

@SN1 

The error message "DISABLED_DUE_TO_GRACE_PERIOD" typically indicates that your Splunk instance is in a grace period due to a licensing issue

• Check License Server Connectivity: Ensure indexers can communicate with the license server.
• Restart Splunk Services: Run splunk restart on your indexers.
• Verify License Configuration: Ensure your license is valid and not expired.
• Check pass4SymmKey: Ensure it matches between the license server and indexers.
• Ensure that your Splunk indexers can communicate with the license server. This often involves checking network connectivity and DNS resolution.
• Verify that the license server's address is correctly listed in the server.conf file on your indexers

Solved: Receiving "DISABLED_DUE_TO_GRACE_PERIOD" - Splunk Community 

[livehybrid]

Hi @SN1 

It sounds like your license has expired or not installed correctly.

Go to https://yourSplunkInstance/en-US/manager/system/licensing and check that the license is showing as valid.

If your license isnt showing here, or if it cannot connect to your license server (if applicable) then you will need to resolve this before being able to search non-internal indexes

Please let me know how you get on and consider accepting this answer or adding karma this answer if it has helped.
Regards

Will