topic Re: Is there a log that would state why my session was disconnected? in Getting Data In

Is there a log that would state why my session was disconnected?

a212830 — Thu, 02 Aug 2018 16:02:25 GMT

Hi,

Is there a log that would state when/why a splunk browser session was disconnected? We are getting these in prod, so I setup a test env, and they are still happening, but I don't see anything logged that says why.

Re: Is there a log that would state why my session was disconnected?

sudosplunk — Thu, 02 Aug 2018 19:49:22 GMT

Hello,

I think you're looking for web_service.log. index=_internal sourcetype=splunk_web_service

Python.log and troubleshooting manual have some information worth looking for.

Re: Is there a log that would state why my session was disconnected?

deepashri_123 — Fri, 03 Aug 2018 06:44:40 GMT

Hey@a212830,

What version of Splunk are you using?
Can you check if you are facing similar problem:
https://answers.splunk.com/answers/654411/splunk-710-upgrade-of-free-version-finalizes-searc.html?childToView=678787#answer-678787

Let me know if this helps!!!

Re: Is there a log that would state why my session was disconnected?

sloshburch — Thu, 16 Aug 2018 14:17:49 GMT

Elaborate on "splunk browser session was disconnected" Are you seeing a specific error message?

I know that use of the /debug/refresh will boot sessions. Of course, there are session timeout conf settings that could be in use to limit an inactive session...but it sounds like you are talking about active sessions? (maybe clarify as well)