Splunk Search

dbx query timeout

aaronkorn
Splunk Employee
Splunk Employee

Is there a flag in the dbx app that times out a query if it exceeds a certain time? We have an SLA that our queries can only run for 5 seconds each and after that they should time out.

VMDX
Engager

I don't think there is - we are considering an approach where we monitor all search jobs on the server side via ps and kill anything running longer than our timeout:

http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/ManagejobsfromtheOS

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...