topic Re: How do I increase the session timeout settings in the config files? in Getting Data In

How do I increase the session timeout settings in the config files?

Mick — Fri, 22 Jan 2010 03:27:19 GMT

I've already increased this setting in web.conf, but my session still times out after an hour. Are there other settings somewhere that I need to change also?

/opt/splunk/etc/system/local/web.conf:

[settings]
tools.sessions.timeout = 480

Re: How do I increase the session timeout settings in the config files?

Mick — Fri, 22 Jan 2010 04:09:07 GMT

There are 2 main parts to Splunk, the web UI and the splunkd back-end, both of them have a timeout variable. When setting the timeout via the 'System Settings' page in 'Manager', it should update both of these settings -

$SPLUNK_HOME/etc/system/local/server.conf -

[general]
sessionTimeout = 3h

$SPLUNK_HOME/etc/system/local/web.conf -

[settings]
tools.sessions.timeout = 180

However, a bug in the current release 4.0.8 (SPL-28766) means that the incorrect web.conf setting is update, so for now a manual file-update is necessary. This should be fixed pretty soon, check out the known-issues page for confirmation - http://docs.splunk.com/Documentation/Splunk/4.0.8/ReleaseNotes/KnownIssues

Re: How do I increase the session timeout settings in the config files?

FixBroken — Thu, 08 Aug 2013 14:19:09 GMT

Is there a way to grant unlimited time for specific users/groups?

Re: How do I increase the session timeout settings in the config files?

LewisWheeler — Mon, 26 Oct 2015 22:04:02 GMT

Did you find a way to do this?

Re: How do I increase the session timeout settings in the config files?

jrodmantcell — Mon, 02 Jul 2018 20:46:39 GMT

There is not a method to do per-group session timeouts.

Your options would entail arranging to feed those groups an already valid session token/ID and or to use something like the guestpass feature for a specific dashboard embedding purpose.

Digging further into those areas would want its own splunk answers post.