topic Re: Why does my Splunk web keep auto-refreshing? in Splunk Cloud Platform

Why does my Splunk web keep auto-refreshing?

shrikant0013 — Mon, 27 Aug 2018 21:53:02 GMT

Has anyone experienced continuous automatic refreshing of Splunk (web console) dashboard or apps including searching.

When I visit Splunk console and try to navigate to any app or dashboard or even management console. It keeps refreshing every 2/3 seconds. I started noticing this behavior suddenly. I tried following

Restart Splunk
Restart VM
Verify CPU/Disk/Network usage, all seems within acceptable range in fact way under control

Splunk deployment

Single Node on big vertically scaled instance (32GB RAM, 8vCPU cores)
Splunk v7.0.4 on linux x64 Apps
Splunk App for AWS, AWS add on
Daily ingestion ~35GB
Browser - Chrome

Re: Why does my Splunk web keep auto-refreshing?

horsefez — Mon, 27 Aug 2018 21:58:18 GMT

Hi @shrikant0013,

this might not be a problem of splunk, but the problem of your webbrowser.
What you describe is actually a problem that already happened with browsers before.

Just google "How do I stop name of your browser from refreshing pages constantly? "

Re: Why does my Splunk web keep auto-refreshing?

shrikant0013 — Mon, 27 Aug 2018 22:17:52 GMT

Thanks for the comment. I do not experience this behavior for other sites Also my team mates has same experience on his laptop and browser.

I have another Splunk Instance (similar config but used for staging/test with few events). This one seems fine.

Also if it helps, auto refreshing is aggressive initially when page is loading to calms down as the page gets loaded in few minutes.

Re: Why does my Splunk web keep auto-refreshing?

mstjohn_splunk — Mon, 27 Aug 2018 22:41:27 GMT

hey @shrikant0013,

Check out this post, and see if there is any information in there that answers your question.

Thanks for posting!

Re: Why does my Splunk web keep auto-refreshing?

shrikant0013 — Mon, 27 Aug 2018 22:48:53 GMT

I did some google searching and had come across this post. That post talks about custom dashboard. I notice this behavior on default Splunk dashboards/pages as well

Re: Why does my Splunk web keep auto-refreshing?

nadlurinadluri — Mon, 27 Aug 2018 23:41:55 GMT

Can you test the same in other browsers too ?

Re: Why does my Splunk web keep auto-refreshing?

brenthale — Tue, 23 Apr 2019 22:07:23 GMT

I get this problem as well. It only seems to happen with Splunk dashboards or Searches; other web-pages are not getting refreshed. It seems to be limited to Splunk pages.

This is annoying when it gets into this mode. Sometimes I can simply copy the URI, close the tab, open a new tab and paste in the URI and it is ok. But I'd rather not do that.

Re: Why does my Splunk web keep auto-refreshing?

matt_park — Tue, 14 May 2019 14:37:46 GMT

What sort of authentication are you using? Seeing this with SSO/SAML and my suspicion is it might be a page element attempting to establish a new session (I could be wrong).

Re: Why does my Splunk web keep auto-refreshing?

Omarop — Wed, 22 May 2019 15:39:16 GMT

Splunk user interface keeps refreshing. Is anyone else having the same problem? If so, can you please provide assistance to have this matter resolved. Your help and feedback is greatly appreciated.

Thanks,

Omar

Re: Why does my Splunk web keep auto-refreshing?

brenthale — Thu, 23 May 2019 18:28:22 GMT

Here is an update to what I am seeing.

I just got into the refresh behavior again. This time I made it go away by closing down a lot of tabs in my browser window. I had ~20+ tabs open in each of 3 separate Chrome windows (don't judge me). Once I closed a bunch of tabs the refresh problem stopped happening.

Yes, I have too many tabs open. But refreshing Splunk windows doesn't seem like it should be happening either.

Re: Why does my Splunk web keep auto-refreshing?

ddrillic — Thu, 23 May 2019 19:00:12 GMT

What exactly is refreshing? maybe a screen-shot...

Re: Why does my Splunk web keep auto-refreshing?

brenthale — Thu, 23 May 2019 19:22:01 GMT

The entire tab is refreshing. It'd have to be a movie to show the refresh. 🙂

Re: Why does my Splunk web keep auto-refreshing?

ddrillic — Thu, 23 May 2019 21:16:14 GMT

I see @brenthale ; - ) I had a similar case at Does a dashboard keep refreshing itself by default?

Does it make sense?

Re: Why does my Splunk web keep auto-refreshing?

Omarop — Fri, 24 May 2019 15:11:49 GMT

My dashboards continue to refresh every second and I tried every browser and it didn't work. Has anyone else come across this issue? Your help will be gladly appreciated.

Re: Why does my Splunk web keep auto-refreshing?

Omarop — Fri, 24 May 2019 15:12:56 GMT

My dashboards.

Re: Why does my Splunk web keep auto-refreshing?

ddrillic — Fri, 24 May 2019 17:08:31 GMT

Can you please check the source code of your dashboads and see whether you have something like <dashboard refresh="X"> or <form refresh="30">?

Re: Why does my Splunk web keep auto-refreshing?

ashutoshab — Sun, 26 May 2019 21:50:55 GMT

If not just 'a dashboard' but 'all the screens of Splunk' are refreshing frequently, the first possibility is because of the SAML / SSO authentication. Please connect with your SAML provider team to check if your SSO is trying to refresh tokens frequently in your browser.

If it's only on the dashboard and not anywhere in Splunk, it is happening because of the refresh interval in the dashboard XML.

Re: Why does my Splunk web keep auto-refreshing?

burwell — Sun, 26 May 2019 22:03:27 GMT

This happens for us with Splunk when the SSO tokens expire as stated above. We need to refresh our tokens and get new windows. They refresh is maddening, especially since you could start to modify a search and then a refresh happens and you lose what you just typed.

Re: Why does my Splunk web keep auto-refreshing?

brenthale — Tue, 28 May 2019 19:01:49 GMT

Often it is not a Dashboard but a simple Search page with a query that is refreshing. I've seen it refresh in both instances.

Re: Why does my Splunk web keep auto-refreshing?

jawaharas — Mon, 26 Aug 2019 04:50:03 GMT

Try increasing connection timeout between the browser and Splunk web as below in web.conf and restart the Splunk instance:

Default:

 server.socket_timeout = <integer>
 * The timeout, in seconds, for accepted connections between the browser and  Splunk Web
 * Default: 10

Proposed:

 server.socket_timeout = 60