Is it really a good idea to have the violation limit in a trial version and cripple your own software? A few days ago my boss was trying to show Splunk Enterprise to his boss, but surprise, the search function had stopped working.
It's a trial version, isn't it? To make things worse, we had no idea that a hard limit existed in the first place, at first just thought that the search was somehow broken, and the error message didn't help much either:
Peer SPLUNK's search ended prematurely. Attempting to reconnect and resume.
No reference to the search function being disabled because of license "violations".
You can switch to the free license when the trial license expires. You might also want to read Types of Splunk licenses if you haven't already.
Totally agree about the error message. It should say something about the license violation. Did you have any notification about that in the Messages menu?
Well, I guess it was observation / feedback, more than a specific question. However, some questions come to mind:
Thanks,
Luca
This doesn't really seem like a question, and further, there is nothing that the Splunk community can do to help.
If you are unhappy with the free trial, perhaps you could mention that to a sales person.
I downvoted this post because this is a valid question to a valid problem. comments are not answers.