Is there a flag in the dbx app that times out a query if it exceeds a certain time? We have an SLA that our queries can only run for 5 seconds each and after that they should time out.
I don't think there is - we are considering an approach where we monitor all search jobs on the server side via ps
and kill anything running longer than our timeout:
http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/ManagejobsfromtheOS