After downloading Anomaly Detective from our website, you will receive a follow up email containing an evaluation license key. This will allow use of all features for a limited time period.

If you have not received this email within a few minutes, please check your junk mail folder or contact

Note: Timechart Mode and Evaluation Mode may be evaluated using Splunk Free. For other versions of Splunk or to use extended features, then a license must be applied.

Applying a license

To apply a new license or to upgrade an existing license:

  1. Log in to Splunk as a user with an Admin role
  2. On the Prelert menu, select About / Licensing
  3. Paste your license key into the text box and click on Install

If you have previously applied a different license key, the most favorable key will be given precedence.

Troubleshooting licensing

If you are experiencing license key issues with Anomaly Detective, please follow these steps to determine the likely cause:

Error installing license key: the key you entered was invalid.
  1. Verify that you are copying/pasting the entire license key.

    License keys are typically made up of 6 parts and separated by a pipe (‘|’) character. They are constraints | customer identifier | expiration date | hostid | licensed capabilities | checksum. Please make sure that the license key does not have any spaces in it or other non-printable characters at the beginning or end of it.

  2. Verify that the license key you are using contains the indvolmb constraint. Licenses issued for other Prelert products will not include this constraint. Anomaly Detective for Splunk will consider licenses with no indvolmb constraint invalid, even though they could be valid for other Prelert products. If you have a license for a different Prelert product but would now like to evaluate the Splunk app, please fill in the registration form to obtain a suitable trial license.

  3. Verify that your Splunk installation meets the minimum System Requirements.

  4. Verify that you are using the latest version of the Prelert Anomaly Detective app.

    The Prelert Anomaly Detective version can be viewed in the About / Licensing page.

  5. Verify that the license file can be written to on the Splunk server

    If you have access to the Splunk server where Anomaly Detective is installed, check that the license file can be written to. This can be found in $SPLUNK_HOME/etc/apps/prelert/lic/license. You can also copy/paste the license key directly into this file. After saving it, check About / Licensing to confirm it has been validated.

  6. For further assistence, please contact

See also