I'm using a Splunk application I developed myself 2 years ago. At the time, I had an Enterprise trial license. I saved off a number of configuration files (indexes, inputs, props, transforms and lookups). I also saved the XML source for 2 reports. I subsequentely reverted to the Free license and have not used the application since.
I have now reinstalled Splunk. I asked for a new Trial license, but Splunk remembered that on that machine I had reverted to Free, so it only allowed me to install a Free license.
I restored all the configuration files listed above manually, through the command line.
Now, when I try to run my Dashboard reports, the searches embedded in them never render, instead displaying "waiting for input". However, if I run any of the queries directly in Search, they all run ok, even when launching them from the Dashboard using the "open in Search" button.
Is this a licensing issue? A permissions issue?
Any input appreciated!
↧