<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: SPLUNKD_CONNECTION_TIMEOUT 6.x in Security</title>
    <link>https://community.splunk.com/t5/Security/SPLUNKD-CONNECTION-TIMEOUT-6-x/m-p/197683#M5775</link>
    <description>&lt;P&gt;Now configurable in web.conf. From &lt;A href="http://www.splunk.com/base/Documentation/latest/Admin/Webconf?r=splunky"&gt;web.conf.spec&lt;/A&gt;:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;splunkdConnectionTimeout = &amp;lt;integer&amp;gt;
    * Number of seconds to wait before timing out when communicating with splunkd
    * Must be at least 30
    * Values smaller than 30 will be ignored, resulting in the use of the default value
    * Defaults to 30
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Fri, 21 Mar 2014 19:05:59 GMT</pubDate>
    <dc:creator>RicoSuave</dc:creator>
    <dc:date>2014-03-21T19:05:59Z</dc:date>
    <item>
      <title>SPLUNKD_CONNECTION_TIMEOUT 6.x</title>
      <link>https://community.splunk.com/t5/Security/SPLUNKD-CONNECTION-TIMEOUT-6-x/m-p/197682#M5774</link>
      <description>&lt;P&gt;In previous versions of splunk, we have overridden the &lt;CODE&gt;SPLUNKD_CONNECTION_TIMEOUT&lt;/CODE&gt; value in the &lt;CODE&gt;__init__.py&lt;/CODE&gt; file due to long waits on our UI. I am currently working on applying our changes in Version 5 and making them "work" for Version 6. I am looking to apply this change, but I see the following comment about that parameter in the file:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;# while this is no longer a constant, we don't know if any externally developed modules were referring
# directly to the constant, so leave the variable in constant ALL-CAPS style
SPLUNKD_CONNECTION_TIMEOUT = 30
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I am concerned mostly because it says "this is no longer a constant". Is this just because I can pass timeout in with my rest call now? Looking at the code, it seems that if timeout is not set, then it will use the value for &lt;CODE&gt;SPLUNKD_CONNECTION_TIMEOUT&lt;/CODE&gt;. I want to make sure that splunk doesn't set this anywhere else (that we would need to change) when it does its own internal rest calls.&lt;/P&gt;</description>
      <pubDate>Fri, 21 Mar 2014 18:36:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/SPLUNKD-CONNECTION-TIMEOUT-6-x/m-p/197682#M5774</guid>
      <dc:creator>RicoSuave</dc:creator>
      <dc:date>2014-03-21T18:36:15Z</dc:date>
    </item>
    <item>
      <title>Re: SPLUNKD_CONNECTION_TIMEOUT 6.x</title>
      <link>https://community.splunk.com/t5/Security/SPLUNKD-CONNECTION-TIMEOUT-6-x/m-p/197683#M5775</link>
      <description>&lt;P&gt;Now configurable in web.conf. From &lt;A href="http://www.splunk.com/base/Documentation/latest/Admin/Webconf?r=splunky"&gt;web.conf.spec&lt;/A&gt;:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;splunkdConnectionTimeout = &amp;lt;integer&amp;gt;
    * Number of seconds to wait before timing out when communicating with splunkd
    * Must be at least 30
    * Values smaller than 30 will be ignored, resulting in the use of the default value
    * Defaults to 30
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 21 Mar 2014 19:05:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/SPLUNKD-CONNECTION-TIMEOUT-6-x/m-p/197683#M5775</guid>
      <dc:creator>RicoSuave</dc:creator>
      <dc:date>2014-03-21T19:05:59Z</dc:date>
    </item>
  </channel>
</rss>

