Refine your search:

I have exceeded the maximum 5 violations on my indexer and tried to apply a the reset license (temporary, valid for 3 days) by selecting "copy & paste the license XML directly". The following message banner displays:

Bad request - In handler 'licenses': web_1234578910.1.lic failed to parse license because: Detected old style forwarder license. ignoring...

What do I need to do?

asked 23 Mar '11, 18:54

Jaci's gravatar image

Jaci ♦
8722217
accept rate: 75%


One Answer:

The error is due to attempting to apply an old 4.0.x/4.1.x version reset license.
Contact Splunk Support to obtain a 4.2 reset license.

In an environment where you have multiple Splunk versions running also ensure the reset license key that is being applied is for the appropriate version.

The email notification with the reset license key would indicate the Splunk version at the end of its content.

Below is the text you would currently see for:

4.0.x/4.1.x

License Details:
Product: Splunk Enterprise
Size: 1 MB
Version: 4.x
Expiration Date: March 26, 2011 10:11am

4.2.x

License Details:
Product: Splunk Enterprise Reset Warnings
Size: 1 MB
Version: 4.2.x
Expiration Date: March 26, 2011 11:24am

link

answered 23 Mar '11, 18:56

Ellen's gravatar image

Ellen ♦
1.7k319
accept rate: 72%

Post your answer
toggle preview

Copyright © 2005-2012 Splunk, Inc. All rights reserved.