|
Hi I'm running a trial of Splunk 4.2.4 on our webserver - just one installation, with no forwarders and not pulling any data from separate machines. I had a problem with my log files yesterday, and resolved it by adding Today I'm getting a second license alert, with the warning Any/all help much appreciated! Thanks, Adam Update I've installed the deployment monitor app, and backfilled the data - it's reporting 0 forwarders, 1 indexer and 1 license pool. I've just noticed that if I log into splunk.com, my account is listed as having no evaluation licenses. Could that be it? I only installed the trial copy 3 days ago and it should be good for 60 days on the trial. |
|
I got to the bottom of my licence warning. My goal in trialling Splunk was to monitor our live webserver, web1. I originally set up the Splunk trial on an internal server, with a universal forwarder on web1 sending the data to Splunk. I soon realised this wasn't going to work, as the Splunk trial sees this as a violation. Instead, I installed Splunk on web1 directly. However, I neglected to stop the Splunk daemon on my previous installation. It turns out the licence is issued to the Splunk.com user - not to each trial usage - so the Splunk was aware that my trial licence was in use on two indexing servers. Disabling the old installation fixed the problem. Hope this helps someone! |
Install Deployment Monitor App or check your splunkd.log on the license.master and the license.slave
@gekoner thanks for your time, I've updated my question