Security

Your session has expired. Log in to return to the system

abhayneilam
Contributor

When I am trying to login to my Search Head I am getting the below error under the login page of Splunk :

Your session has expired. Log in to return to the system

My other team members are able to login in without any problem , this problem is happening only for me alone. Till yesterday all was fine. suddenly it has started like this. I have checked trying login in from different PC but again the same stuff.

Please help !!

Tags (2)

Graham_Hanningt
Builder

This comment might not apply to the specific circumstances of this question, but I think it's worth mentioning here for users searching for answers:

are you running [Splunk in] multiple [Docker] containers on the same host? If so, the session-key cookie will break as it's tracked by the url of the host.

That is, if you access multiple instances of Splunk Web on the same server—for example, http://mydockerhost:8801 and http://mydockerhost:8802—from tabs of the same browser, then you'll experience the error reported in this question.

For details, see docker-splunk GitHub issue #68.

0 Karma

rajeev_ku
Path Finder

Should check for firewall on SH and try clearing cache on web browser then try again if not did before.

0 Karma

arkadyz1
Builder

We have the same problem. I've seen a different question here, back from Splunk 5.0, and the answer was to clear the browser cache. The OP there, however, had to restart the computer (not the Splunk Head, but the one with the browser).

0 Karma

abhayneilam
Contributor
Any solution is highly appreciated !!  Please Help !!
0 Karma

kendrickt
Path Finder

Are you using LDAP or Splunk authentication?

It could be a multitude of things. My assumption would be a client problem and not an error with Splunk - as you've said, others can login.

You've also said that you've tried on a different computer with no luck. Are you on an enterprise network? Are you logging into a domain? If so, your account profile on the network could be carrying the problem with it on multiple computers.

0 Karma

abhayneilam
Contributor

I am using scripted authentication which as working fine, suddenly it stopped, other team members are able to login except me. If I am trying to login from a different machine, it is giving the same error :

Your session has expired. Log in to return to the system

I am login in to my computer with password which does LDAP authentication and the same password is for login to Splunk for that to do we have scripted authentication in splunk and also AAA authentication permission has been granted to access the splunk.

But I am able to login to other Search Head , I have only problem with the search head 20.

0 Karma

arkadyz1
Builder

Can you log in from a different browser? I had the problem under IE11, but could come in with Chrome. A strange thing, though, was that my session would just end out of the blue despite the activity - even on Chrome.

0 Karma

tweaktubbie
Communicator

With 6.4.2 and IE11 this issue still happens when users try to open two tabs in the same browser screen for different splunk search heads (acceptance/production).

0 Karma

kendrickt
Path Finder

Okay, understood. Probably above my ability.

Other than restarting that particular Search Head I have no other suggestions.

Good luck with the issue.

0 Karma
Get Updates on the Splunk Community!

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...