I take back my last posting about the Splunk>answers page not being useful. Right after I posted my comment, and right before I logged off, I clicked on the question, instead of the green button, and the answers appeared. I was thinking the green button would make the answers show up. In any event I would like to thank iamarunk for his answer: "Setting-->Licensing->change license group. I am new to Splunk, and I was making my first attempt at installing a heavy forwarder on the free Splunk version of Enterprise. I was doing the Setting-->Licensing-> part right, but I was clicking on Enterprise, instead of the free version at the bottom. I had been very frustrated at the error messages telling me my license was expired, when I didn't even have a license, for real. In any event I was able to get data from my search, so I can now proceed with my class. So thanks again to iamarunk.
... View more