When I am trying to login to my Search Head I am getting the below error under the login page of Splunk :
Your session has expired. Log in to return to the system
My other team members are able to login in without any problem , this problem is happening only for me alone. Till yesterday all was fine. suddenly it has started like this. I have checked trying login in from different PC but again the same stuff.
Please help !!
This comment might not apply to the specific circumstances of this question, but I think it's worth mentioning here for users searching for answers:
are you running [Splunk in] multiple [Docker] containers on the same host? If so, the session-key cookie will break as it's tracked by the url of the host.
That is, if you access multiple instances of Splunk Web on the same server—for example, http://mydockerhost:8801
and http://mydockerhost:8802
—from tabs of the same browser, then you'll experience the error reported in this question.
For details, see docker-splunk GitHub issue #68.
Should check for firewall on SH and try clearing cache on web browser then try again if not did before.
We have the same problem. I've seen a different question here, back from Splunk 5.0, and the answer was to clear the browser cache. The OP there, however, had to restart the computer (not the Splunk Head, but the one with the browser).
Any solution is highly appreciated !! Please Help !!
Are you using LDAP or Splunk authentication?
It could be a multitude of things. My assumption would be a client problem and not an error with Splunk - as you've said, others can login.
You've also said that you've tried on a different computer with no luck. Are you on an enterprise network? Are you logging into a domain? If so, your account profile on the network could be carrying the problem with it on multiple computers.
I am using scripted authentication which as working fine, suddenly it stopped, other team members are able to login except me. If I am trying to login from a different machine, it is giving the same error :
Your session has expired. Log in to return to the system
I am login in to my computer with password which does LDAP authentication and the same password is for login to Splunk for that to do we have scripted authentication in splunk and also AAA authentication permission has been granted to access the splunk.
But I am able to login to other Search Head , I have only problem with the search head 20.
Can you log in from a different browser? I had the problem under IE11, but could come in with Chrome. A strange thing, though, was that my session would just end out of the blue despite the activity - even on Chrome.
With 6.4.2 and IE11 this issue still happens when users try to open two tabs in the same browser screen for different splunk search heads (acceptance/production).
Okay, understood. Probably above my ability.
Other than restarting that particular Search Head I have no other suggestions.
Good luck with the issue.