i have the similar issue.i couldn't find any document or solution for this..if someone had this issue and resolved please let us know the process to fix this issue. Below are the warnings in the licencing page In the Splunk > System > Licencing 1 pool warning reported by 1 indexer - correct by midnight to avoid violation 1 pool quota overage warning reported - correct by midnight to avoid violation Under the Pools Table auto_generated_pool_enterprise 17 MB / 0 MB ... View more