|
What happens when I exceed my Enterprise license limit? How many times can I exceed my Enterprise Trial licensed limit? How about Free? |
|
from the documentation: "If you exceed your licensed daily volume on any one calendar day, you will get a violation warning. The message persists for 14 days. If you have 5 or more violations on an Enterprise license or 3 violations on a Free license in a rolling 30-day period, search will be disabled. Search capabilities return when you have fewer than 5 (Enterprise) or 3 (Free) violations in the previous 30 days or when you apply a new license with a larger volume limit. Note: During a license violation period, Splunk does not stop indexing your data. Splunk only blocks access while you exceed your license. Note: Searches to the _internal index are not disabled even during a licensing-enforcement period, so you can still access the Indexing Status dashboard, or run searches against _internal to diagnose the licensing problem. " so: you can exceed your Enterprise license 4 times within 30 days--the 5th time, search will be disabled. You can exceed your Free licenses 2 times, and the 3rd time, search will be disabled. |
|
I had this problem as we went way over after first adding our servers due to historical data. We have been supplied a larger licence which I have applied however it still wont let us carry out any searches now. Is there anyway to reset this? You will need to request a reset license. Take a look at this for more: http://splunk-base.splunk.com/answers/12970/excessive-license-violations-after-installing-new-license
(10 Aug '11, 19:39)
David
|
|
i'm running into this problem with my eval , what purpose does this serve other than trashing the eval ? You should try contacting sales to see if they can offer you a larger license for your evaluation. The licenses have a time out so if you are legitimately evaluating, I don't see why they wouldn't offer you the bigger license.
(09 Mar '11, 18:12)
the_wolverine ♦
|
