Hi all,
I installer a splunk few weeks ago, played 3 days on one server with 3 forwardings (oneself and 2 on others servers).
I reconnect today and transform my licence (was entreprise trail) into a free licence because I have 2 warning messages :
1- Missing or malformed messages.conf stanza for LM_LICENSE:SLAVE_WARNING_COUNT_SELF 05/05/2019 à 12:18:01
2- Missing or malformed messages.conf stanza for LM_LICENSE:SLAVE_WARNING__1557007200_ 05/05/2019 à 12:18:01
However, when I watch the licence usage reporting, I have 3 hard warning et I read I'm in violation.
For the last 30 days, my daily licence quota was about 40%. (Licence-->Licence usage reporting).
index=_internal per_index_thruput earliest=-60d@d latest=now | timechart span=1d eval(sum(kb)/1024) as "Daily Indexing Volume in MB"
--> give the same result : I stay below 500 M
Is there somebody to help me understand what's wrong with my config ?
Thanks
... View more