A license violation in Splunk is caused when you exceed the data limit. This license warning will persist for 14 business days. In a commercial license, you can have a maximum of 5 warnings in a 30-day window before your Indexer’s search results and reports stop working. In a free version, you get only 3 warnings.

BY Best Interview Question ON 24 Feb 2020