topic Re: significant clock differences in Knowledge Management

significant clock differences

dmlee — Thu, 01 Dec 2011 11:55:20 GMT

I saw this error message when I tried to login splunk web , the whole message is Login will fail due to significant clock differences between the server and this machine

I check both machine's system time , there is only a few differences between them (seconds).

any idea about this ? thanks

Re: significant clock differences

MHibbin — Thu, 01 Dec 2011 17:27:58 GMT

Any chance of using NTP?

Re: significant clock differences

troywollenslege — Fri, 06 Apr 2012 17:04:24 GMT

We are getting the same problem with one of our servers. Running Splunk 4.3.1 build 119532.
Both servers have NTP enabled and are within 2-3 seconds of the client. (within about 2 seconds of each other). One server works fine, one server gives this error.

Re: significant clock differences

carmackd — Mon, 28 Sep 2020 11:41:11 GMT

Check the login.html file in $SPLUNK_HOME/share/splunk/search_mrsparkle/templates/account/ and make sure it is current with the Splunk version you're running. I had the same problem and saw differences between the login.html page that was in that directory and the one that was supposed to install during my upgrade to 4.3.1.

Old login.html page contain the following, while the latest did not:

#some code here#
var s = $.cookie('${cherrypy.config['tools.sessions.name']}');
#some code here#
else if (!s) {
        $('.error').hide();
        $('#jserror').text(_('Login will fail due to a significant clock differences between the server and this machine')).show();
    }

After updating the file with the latest, the error message went away.