Hi Experts,
I am configuring a dynamic LDAP group with SPLUNK .This group has more then 50,000 users.My advance LDAP settings are
Search request size limit:-50,000
Search request time limit :- 25
Network socket timeout :- 27
With these above setting I am getting the follwoing Error
"Timed out while waiting for splunkd daemon to respond (Splunkd daemon is not responding: ('Error connecting to /servicesNS/-/launcher/admin/LDAP-groups: The read operation timed out',)). Splunkd may be hung."
Please suggest that how I can increase the Search Request time along with UI time out.
Thanks
VG
As I did not receive any advice or answer from Splunk Community I figured this out myself. I hope it may help someone
I can increase the default limit as follows
Change in the following conf files
1) Authentication.conf
network_timeout = 1200 (previously it was 25 sec.)
sizelimit =15000 (previously it was 1000)
timelimit = 1200 (previously it was 20 sec.)
2) web.conf
# default timeout, in seconds, when communicating with splunkd
splunkdConnectionTimeout = 1201 (previously it was 30 sec.)
As I did not receive any advice or answer from Splunk Community I figured this out myself. I hope it may help someone
I can increase the default limit as follows
Change in the following conf files
1) Authentication.conf
network_timeout = 1200 (previously it was 25 sec.)
sizelimit =15000 (previously it was 1000)
timelimit = 1200 (previously it was 20 sec.)
2) web.conf
# default timeout, in seconds, when communicating with splunkd
splunkdConnectionTimeout = 1201 (previously it was 30 sec.)