# Unable to write audit log entry because there is no valid license

**URL:** <https://community.graylog.org/t/unable-to-write-audit-log-entry-because-there-is-no-valid-license/14392>\
**Category:** Graylog Central (peer support)\
**Created:** [March 9, 2020, 9:07am UTC](https://community.graylog.org/t/unable-to-write-audit-log-entry-because-there-is-no-valid-license/14392 "2020-03-09T09:07:52Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![AnkitS](https://avatars.discourse-cdn.com/v4/letter/a/cc9497/32.png) [@AnkitS](https://community.graylog.org/u/AnkitS)\
**Post date:** [March 9, 2020, 9:07am UTC](https://community.graylog.org/t/unable-to-write-audit-log-entry-because-there-is-no-valid-license/14392/1 "2020-03-09T09:07:52Z")

</div>

Dear all ,

We are getting below error, And we have already allowed [api.graylog.com](http://api.graylog.com) on port 443 kindly suggest what could be a root cause.

tail -f /var/log/graylog-server/server.log  
2020-03-09T13:05:41.165+05:30 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.  
2020-03-09T13:05:41.191+05:30 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.  
2020-03-09T13:05:58.529+05:30 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.  
2020-03-09T13:05:59.270+05:30 ERROR [AuditLogger] Unable to

---

<div class="post-metadata">

**Author:** ![AnkitS](https://avatars.discourse-cdn.com/v4/letter/a/cc9497/32.png) [@AnkitS](https://community.graylog.org/u/AnkitS)\
**Post date:** [March 9, 2020, 9:09am UTC](https://community.graylog.org/t/unable-to-write-audit-log-entry-because-there-is-no-valid-license/14392/2 "2020-03-09T09:09:34Z")

</div>

Please find API connectivity detail.

curl -v [https://api.graylog.com/report](https://api.graylog.com/report)

- Trying 52.72.103.164…
- TCP\_NODELAY set
- Connected to [api.graylog.com](http://api.graylog.com) (52.72.103.164) port 443 (#0)
- ALPN, offering h2
- ALPN, offering http/1.1
- successfully set certificate verify locations:
- CAfile: /etc/ssl/certs/ca-certificates.crt  
CApath: /etc/ssl/certs
- TLSv1.3 (OUT), TLS handshake, Client hello (1):
- TLSv1.3 (IN), TLS handshake, Server hello (2):
- TLSv1.2 (IN), TLS handshake, Certificate (11):
- TLSv1.2 (IN), TLS handshake, Server key exchange (12):
- TLSv1.2 (IN), TLS handshake, Server finished (14):
- TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
- TLSv1.2 (OUT), TLS change cipher, Client hello (1):
- TLSv1.2 (OUT), TLS handshake, Finished (20):
- TLSv1.2 (IN), TLS handshake, Finished (20):

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 9, 2020, 1:15pm UTC](https://community.graylog.org/t/unable-to-write-audit-log-entry-because-there-is-no-valid-license/14392/3 "2020-03-09T13:15:20Z")

</div>

he @AnkitS

the entry is given because you have installed the Graylog enterprise plugins, but have not installed an enterprise license.

That is the only reason for this message.

---

<div class="post-metadata">

**Author:** ![AnkitS](https://avatars.discourse-cdn.com/v4/letter/a/cc9497/32.png) [@AnkitS](https://community.graylog.org/u/AnkitS)\
**Post date:** [March 9, 2020, 1:50pm UTC](https://community.graylog.org/t/unable-to-write-audit-log-entry-because-there-is-no-valid-license/14392/4 "2020-03-09T13:50:59Z")

</div>

Hello jan,

We have already created enterprise licence using graylog cluster ID and attached on the graylog dashboard. Still getting error.

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 9, 2020, 1:58pm UTC](https://community.graylog.org/t/unable-to-write-audit-log-entry-because-there-is-no-valid-license/14392/5 "2020-03-09T13:58:25Z")

</div>

he @AnkitS

what did you see on `Enterprise > License` is the license displayed their without any errors?

---

<div class="post-metadata">

**Author:** ![AnkitS](https://avatars.discourse-cdn.com/v4/letter/a/cc9497/32.png) [@AnkitS](https://community.graylog.org/u/AnkitS)\
**Post date:** [March 9, 2020, 2:11pm UTC](https://community.graylog.org/t/unable-to-write-audit-log-entry-because-there-is-no-valid-license/14392/6 "2020-03-09T14:11:41Z")

</div>

Error :- Graylog licences violation detected remote check have failed too many times

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 9, 2020, 2:56pm UTC](https://community.graylog.org/t/unable-to-write-audit-log-entry-because-there-is-no-valid-license/14392/7 "2020-03-09T14:56:51Z")

</div>

then Graylog is not able to connect to the Graylog Backoffice. I guess that you have enable https with a custom java keystore?

Or you need to use a proxy for the connection to the outside?

---

<div class="post-metadata">

**Author:** ![AnkitS](https://avatars.discourse-cdn.com/v4/letter/a/cc9497/32.png) [@AnkitS](https://community.graylog.org/u/AnkitS)\
**Post date:** [March 11, 2020, 12:40pm UTC](https://community.graylog.org/t/unable-to-write-audit-log-entry-because-there-is-no-valid-license/14392/8 "2020-03-11T12:40:55Z")

</div>

Hello ,

We had not enabled https with a custom java keystore.

Sorry we are getting error at enterprise \> license below

“violation detected this cluster is not covered by the license”

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 12, 2020, 8:50am UTC](https://community.graylog.org/t/unable-to-write-audit-log-entry-because-there-is-no-valid-license/14392/9 "2020-03-12T08:50:07Z")

</div>

the cluster id you have used for the license is not the cluster id of you cluster.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [March 26, 2020, 9:00am UTC](https://community.graylog.org/t/unable-to-write-audit-log-entry-because-there-is-no-valid-license/14392/10 "2020-03-26T09:00:32Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
