Unable to install new license in Splunk instance

Applicability

Splunk Enterprise

Description

After a license expiration, a new license was obtained and installed, however Spunk continues to report license errors and possibly blocking searches.

Example error:

"Error in 'litsearch' command: Your Splunk license expired or you have exceeded your license limit too many times. Renew your Splunk license by visiting www.splunk.com/store or calling 866.GET.SPLUNK"

 

Investigation

* Attempts to re-add the license from the Web UI or CLI fails indicating the license already exists.
 

Resolution

1. Check for older un-used or expired license files in the $SPLUNK_HOME/etc/licenses directory on the license instace.
2. Identify all .lic file(s) that are valid for the deployment, including Enterprise Security, ITSI, along with the new license to be applied.  Move all other .lic files to another location outside of the Splunk path to ensure they are backed up.  Make sure to leave the valid licenses and the new license file(s) in place.  *Note:  If there is difficulty identifying current valid licenses for your organization, please reach out to Splunk service or your Spunk account team.
3. Restart Splunk on the license instance.
4. Navigate to the Web UI licensing page to ensure the new license is shown and valid.

Related Links

Splunk Community
Splunk-Enterprise-Term-License-renewal

Revision History

Revision	Publish Date	Comments
1.0	28-Sep-2026	Initial Release