Security

How to increase "Search Request Time limit" in advance LDAP setting

vikas_gopal
Builder

Hi Experts,

I am configuring a dynamic LDAP group with SPLUNK .This group has more then 50,000 users.My advance LDAP settings are
Search request size limit:-50,000
Search request time limit :- 25
Network socket timeout :- 27

With these above setting I am getting the follwoing Error
"Timed out while waiting for splunkd daemon to respond (Splunkd daemon is not responding: ('Error connecting to /servicesNS/-/launcher/admin/LDAP-groups: The read operation timed out',)). Splunkd may be hung."

Please suggest that how I can increase the Search Request time along with UI time out.

Thanks
VG

Tags (2)
0 Karma
1 Solution

vikas_gopal
Builder

As I did not receive any advice or answer from Splunk Community I figured this out myself. I hope it may help someone
I can increase the default limit as follows

Change in the following conf files
1) Authentication.conf
network_timeout = 1200 (previously it was 25 sec.)
sizelimit =15000 (previously it was 1000)
timelimit = 1200 (previously it was 20 sec.)

2) web.conf
# default timeout, in seconds, when communicating with splunkd
splunkdConnectionTimeout = 1201 (previously it was 30 sec.)

View solution in original post

vikas_gopal
Builder

As I did not receive any advice or answer from Splunk Community I figured this out myself. I hope it may help someone
I can increase the default limit as follows

Change in the following conf files
1) Authentication.conf
network_timeout = 1200 (previously it was 25 sec.)
sizelimit =15000 (previously it was 1000)
timelimit = 1200 (previously it was 20 sec.)

2) web.conf
# default timeout, in seconds, when communicating with splunkd
splunkdConnectionTimeout = 1201 (previously it was 30 sec.)

Get Updates on the Splunk Community!

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...