I am getting "HttpListener - Socket error from 127.0.0.1 while accessing /servicesNS/-/-/admin/LDAP-groups: Broken pipe" error while trying to get the ldap groups using the rest api as below
| rest /servicesNS/-/-/admin/LDAP-groups splunk_server=* | search roles=* | table strategy title roles
Splunk settings are like this
ulimit -n : 65535
ulimit -Hn and ulimit -Sn: 65535
ulimit -u: 1032358
[httpServer]
maxThreads = 100000
maxSockets = 50000
How to fix this error?
I would get this when trying to map LDAP groups. Try adjusting your limits in the authentication.conf:
[test_directory]
network_timeout = 20
sizelimit = 50
timelimit = 15
For me, I had to reduce sizelimit, I had it at 1000 before.
@srinathd
What version of Splunk are you using?