topic How configure idle time timeout in splunk web? in Splunk Enterprise

How configure idle time timeout in splunk web?

imam29 — Wed, 12 Mar 2025 09:12:06 GMT

How to set idle time, when the user has no activity for a long time, for example 15 minutes, then splunkweb will ask to log in again

Re: How configure idle time timeout in splunk web?

livehybrid — Wed, 12 Mar 2025 09:34:36 GMT

Hi @imam29

It sounds like you'll need to update the ui_inactivity_timeout setting under web.conf/[settings] which is the timeout for when the user does not interact with the browser, but there is also another setting "tools.sessions.timeout" which is the actual session timeout value.

However, I think it would be worth reading this doc about setting session timeout so that you can satisfy yourself that you are updating the correct setting and not being overly permissive with timeouts.

https://docs.splunk.com/Documentation/Splunk/9.4.0/Admin/Configureusertimeouts#:~:text=In%20addition%20to%20setting%20the,The%20default%20is%2060%20minutes.

In addition to managing in the config files, you can also update this in the UI if preferred:

Click Settings in the upper right-hand corner of Splunk Web.
Under System, click Server settings.
Click General settings.
In the Session timeout field, enter a timeout value.
Click Save.

Please let me know how you get on and consider adding karma to this or any other answer if it has helped.
Regards

Will

Re: How configure idle time timeout in splunk web?

imam29 — Wed, 12 Mar 2025 09:38:02 GMT

I has been configure ui_inactivity_timeout = 15 but not working , the session still there not ask login again

Re: How configure idle time timeout in splunk web?

livehybrid — Wed, 12 Mar 2025 09:43:04 GMT

Hi @imam29

Just to check, have you restarted Splunk since making this change?

Its also worth considering the following from the docs - How long did you wait to check for a timeout? What is your tools.sessions.timeout set to?

The countdown for the splunkweb/splunkd session timeout does not begin until the browser session reaches its timeout value. So, to determine how long the user has before timeout, add the value of ui_inactivity_timeout to the smaller of the timeout values for splunkweb and splunkd. For example, assume the following: splunkweb timeout: 15m splunkd timeout: 20m browser (ui_inactivity_timeout) timeout: 10m The user session stays active for 25 minutes (15m+10m). After 25 minutes of no activity, the session ends, and the instance prompts the user to log in again the next time they send a network request to the instance.

Please let me know how you get on and consider adding karma to this or any other answer if it has helped.
Regards

Will

Re: How configure idle time timeout in splunk web?

imam29 — Wed, 12 Mar 2025 09:47:50 GMT

where is setting splunkweb timeout and splunkd timeout ? we only set in web.conf

Re: How configure idle time timeout in splunk web?

livehybrid — Wed, 12 Mar 2025 10:21:48 GMT

HI @imam29

In this case, I would expect the timeout to be after 30 minutes of no activity in the UI.

The other timeout option is in server.conf/[general]/sessionTimeout -

See https://docs.splunk.com/Documentation/Splunk/latest/Admin/Serverconf?_gl=1*homgau*_ga*NzI2Njg4NjMzLjE2NTUzOTI4OTQ.*_gid*MTIyOTUyNTY3Mi4xNjU1MzkyODk0&_ga=2.206629523.1229525672.1655392894-726688633.1655392894#:~:text=string.%0A*%20Default%3A%20shortname-,sessionTimeout,-%3D%20%3Cnonnegative%20integer%3E%5Bs

The ui_inactivity_timeout is the amount of minutes when there is no user interface clicking, mouseover, scrolling, or resizing. * Notifies client side pollers to stop, resulting in sessions expiring at the 'tools.sessions.timeout' value, so any mouseover, scrolling etc on the browser will reset this timer.

Just to check, have you restarted since making these changes?

Please let me know how you get on and consider adding karma to this or any other answer if it has helped.
Regards

Will

Re: How configure idle time timeout in splunk web?

imam29 — Fri, 14 Mar 2025 03:55:32 GMT

after we add tools.sessions.timeout , it is work

Thank you