Searching the internal indexes is not blocked.Splunk Enterprise continues to index your data.This restriction includes scheduled reports and alerts. Using search is blocked while you are in violation.Here is what happens to indexing and search capability during a license violation: The license violation conditions are based upon the license type. To troubleshoot a communications issue, see Violations due to broken connections between license manager and peers.Ī license violation happens when you exceed the number of warnings allowed on your license. When a license peer is unable to communicate with the license manager.When a license stack has reached its daily license volume limit.When a license pool has reached its daily license volume limit.These are some of the conditions that generate a license warning: Clicking the link in the message takes you to the Licensing page, where the warning appears under Alerts. For guidance on what to do when a warning appears, see Correcting license warnings.Ī license warning appears as an administrative message in Splunk Web. If you generate a license warning, you have until midnight on the license manager to resolve the warning before it counts against the total number of warnings allowed by your license.If you exceed your licensed daily volume in any single calendar day, you generate a license warning.Your daily indexing volume is measured from midnight to midnight using the system clock on the license manager.License warnings occur when you exceed the maximum daily indexing volume allowed for your license. If you have multiple license warnings, and have exceeded the license warning limit for your license, you will receive a license violation. ![]() A license violation occurs after a series of license warnings.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |