What happens when license expires. (4267241)

What functionality is no longer available when a syslog-ng Store Box (SSB) license expires?

When a license expires the following functionality is no longer available

1. Any configuration changes which require a ‘Commit’ won’t be processed and the following error will be reported.

++++++++++++++++++++

Error generating configuration

Error controlling service; init='syslog-ng', control='restart', exit_code='1', output_last_line='See "systemctl status syslog-ng.service" and "journalctl -xe" for details.'

++++++++++++++++++++

2. Logs will no longer be ingested.

3. Logs which have already been stored on the SSB will no longer be searchable and the following error will be reported.

++++++++++++++++++++

Error connecting to socket; error_code='111', error_msg='Connection refused', endpoint='/opt/ssb/var/logspace/name/center/indexer.ctl'

++++++++++++++++++++

Once a valid license has been added to the appliances, then commits will be processed, logs will be ingested and the logstores will be searchable again.

However, if there is a time gap between the date the old license expired and the new license was added then there will be a corresponding gap in log collection as can be seen in the following image.