Documentation

Troubleshoot Telegraf Enterprise licensing

Use this page to diagnose common Telegraf Controller Enterprise license issues.

Telegraf Enterprise

Unlock higher configuration and agent limits, enhanced security features, and official support for Telegraf and Telegraf Controller.

License upload was rejected

When a license upload fails validation, Telegraf Controller returns an error describing the cause. The previously active license (if any) is retained.

malformed JWT header

unknown kid: <value>

issuer mismatch

exp is in the past

iat is in the future

license is past grace period

ent_max_configs is not a positive integer

ent_max_agents is not a positive integer

Failed uploads never downgrade a valid license

When replacing an existing valid license, a validation failure on the new upload leaves the previous license active. Your enterprise features and scale limits are unaffected.

LICENSE_FILE_PATH is set but the license isn’t loaded

Work through this checklist:

  • Is the file readable by the Telegraf Controller process? Check file permissions and the user account Telegraf Controller runs as. A permission-denied error on the file appears in the startup logs.
  • Does the database already contain a license? LICENSE_FILE_PATH is consulted only when no license is stored in the database. To re-run bootstrap from LICENSE_FILE_PATH, first remove the existing license through the UI.
  • Check the startup logs for the license bootstrap message. A successful bootstrap logs the license ID. A validation failure logs the reason. See Where to look in logs.

Banners say “expired” but I just renewed

License expiration status is re-evaluated hourly, so the status may not reflect a renewal until the next hourly check. To pick up the new license immediately, apply the renewed license through the UI—UI uploads take effect with no waiting.

Enterprise features are still disabled after applying a license

Verify the license is active:

  1. Open Settings > Enterprise and confirm the license details are present and the status chip shows Valid.
  2. From the API, call GET /api/license/entitlements and confirm the response shows "enterpriseEnabled": true.

If both look correct but a specific authentication provider (LDAP or OIDC) isn’t working, check whether the corresponding AUTH_LDAP_* or AUTH_OIDC_* environment variables were set before Telegraf Controller started. These variables are read at startup. If they were added or changed after Telegraf Controller started, restart Telegraf Controller so the new values take effect.

Where to look in logs

License-related events are written to the Telegraf Controller application logs (stdout and stderr by default).

Look for log lines containing:

  • license: license bootstrap, validation, and replacement events.
  • License bootstrap: the message emitted when LICENSE_FILE_PATH is processed at startup. A successful load includes the license ID; a failure includes the validation error.
  • License upload: the message emitted when a license is uploaded through the UI.
  • License expiration: messages emitted by the hourly expiration check when a license transitions between lifecycle states.

Get help

Contact InfluxData support for any licensing issue you can’t resolve from this page. When opening a support request, include:

  • Your license ID (visible in Settings > Enterprise or in the GET /api/license response).
  • The Telegraf Controller version.
  • The exact validation error message if you encountered one.
  • A relevant excerpt from the Telegraf Controller logs showing the problem.

Was this page helpful?

Thank you for your feedback!


InfluxDB OSS 2.9.0: API tokens are hashed by default

Stronger token security in InfluxDB OSS 2.9.0 — tokens are hashed on disk by default. Existing tokens are hashed on first startup and can’t be recovered afterward. Capture any plaintext tokens you still need before you upgrade.

View InfluxDB OSS 2.9.0 release notes

Hashed tokens authenticate exactly like unhashed tokens — clients and integrations keep working.

Also new in 2.9.0:

  • Configurable backup compression
  • Restore support for backups containing hashed tokens
  • Tighter Edge Data Replication queue validation
  • Flux upgrade
  • Compaction reliability improvements

Key enhancements in Explorer 1.9

Explorer 1.9 is now available with InfluxQL support, an AI-assisted Flux to SQL converter (beta), and new live sample data simulators.

View Explorer 1.9 release notes

Explorer 1.9 includes new features and improvements that make it easier to query, visualize, and manage data.

Highlights:

  • Flux to SQL converter (beta): Convert Flux queries to SQL with an AI-assisted converter.
  • InfluxQL support: Query data with InfluxQL in the Data Explorer and dashboards, and save and load InfluxQL queries.
  • InfluxQL visualizations: Render line and bar charts from InfluxQL results with per-tag series grouping.
  • Query error history: Review a history of query errors in the query tool.
  • Live sample data simulators: Generate continuous live sample data with new bird data and signal generator simulators.

For more details, see Explorer 1.9 release notes

InfluxDB 3.10 is now available

InfluxDB 3 Core 3.10 adds an automatic catalog format upgrade, a configurable query-concurrency limit, and processing engine improvements.

Key updates in InfluxDB 3 Core 3.10:

  • Catalog format upgrade: the on-disk catalog automatically upgrades from format v2 to v3 on first 3.10 startup. Migration is one-way—back up your catalog before upgrading.
  • --max-concurrent-queries: limit concurrent queries (adjustable at runtime).
  • GET /ready endpoint for readiness probes.
  • Processing engine: cross-database queries and trigger lockdown flags.

For more information, see the InfluxDB 3 Core release notes.

InfluxDB 3.10 is now available

InfluxDB 3 Enterprise 3.10 adds automated backup and restore, row-level deletions, and user management, with an automatic catalog format upgrade and performance preview improvements.

Key updates in InfluxDB 3 Enterprise 3.10:

  • Catalog format upgrade: the on-disk catalog automatically upgrades from format v2 to v3 on first 3.10 startup. Migration is one-way—back up your catalog before upgrading.
  • Automated backup and restore (beta)
  • Row-level deletions
  • User management (authentication and RBAC) — preview
  • Performance preview improvements

Backup and restore, row-level deletions, and the performance preview require the Enterprise storage engine upgrade (opt-in beta). Beta and preview features are subject to breaking changes and aren’t recommended for production use.

For more information, see the InfluxDB 3 Enterprise release notes

Telegraf Enterprise is now generally available

Telegraf Enterprise is now generally available, along with Telegraf Controller v1.0.

Telegraf Enterprise combines Telegraf Controller, a centralized management console for Telegraf, with official support from InfluxData. Manage configurations, monitor fleet health, and operate tens of thousands of Telegraf agents from a single system.

InfluxDB Docker latest tag changing to InfluxDB 3 Core

On September 15, 2026, the latest tag for InfluxDB Docker images will point to InfluxDB 3 Core. To avoid unexpected upgrades, use specific version tags in your Docker deployments.

If using Docker to install and run InfluxDB, the latest tag will point to InfluxDB 3 Core. To avoid unexpected upgrades, use specific version tags in your Docker deployments. For example, if using Docker to run InfluxDB v2, replace the latest version tag with a specific version tag in your Docker pull command–for example:

docker pull influxdb:2