topic Re: Lost or Splunk Web may be down. in Security

Lost or Splunk Web may be down.

MrWh1t3 — Tue, 14 Aug 2012 04:07:34 GMT

I'm running Active Directory app and keep getting the Splunk Web may be down error. This question appears to be answered, but I don't consider it an answer if it doesn't solve the issue. Does anyone know if there has been a "hack" or workaround for this?

http://splunk-base.splunk.com/answers/7904/splunkweb-your-network-connection-may-have-been-lost-or-splunk-web-may-be-down

Re: Lost or Splunk Web may be down.

Drainy — Tue, 14 Aug 2012 07:15:15 GMT

Well there isn't really any sort of hack to fix this, essentially it means your system is under load and you may need to look at increasing some of the specifications to help it cope.

The AD app itself is quite intensive as it runs a lot of ad-hoc commands to pull in additional data as needed. Yiu may find it helps to split off some functionality / apps to a search head if you don't have one already.

Re: Lost or Splunk Web may be down.

MrWh1t3 — Tue, 14 Aug 2012 13:00:12 GMT

You know, I will check tomorrow. Now that I think about it I was viewing splunkweb via a thin client. It's quite possible that it simply timed out due to the latency we sometimes see with our things clients. I'll report back.

Re: Lost or Splunk Web may be down.

MrWh1t3 — Wed, 15 Aug 2012 13:27:15 GMT

I believe it was the heavy load and lack of power in the thin clients. Everything worked fine today.