How to resolve error "Upload failed with ERROR : Read Timeout for the log file" when uploading a generated alert log to Splunk?

[mengye]

Hi,

I tried to upload the generated alert to Splunk with the function "Upload File" After few mins, it shows "Upload failed with ERROR : Read Timeout for the log file".

It could related with the format of generated alert. But I don't know what is issue with alert log, which is in own format.

The error message is pretty general for ""Upload failed with ERROR : Read Timeout for the log file" " How can I know the exact issue and change the file?

Thank you!

[Tdot]

1. Browse to the location of "server.conf" file assuming you've installed Splunk in /opt/splunk and edit it: $ sudo nano /opt/splunk/etc/system/local/server.conf

2. From the "server.conf" file, go to the bottom of the screen and in a new line, press Enter and then add:

[diskUsage]

minFreeSpace = 10

3.  Save the "server.conf" file

4. Restart Splunk Service: $ sudo /opt/splunk/bin/splunk  stop

5. Upload the file.

[jchefdeville]

If you are talking about the Fundamentals 1 training, I resolved the issue by editing $SPLUNK_HOME/etc/system/local/server/conf
and adding

[diskUsage]
minFreeSpace = 10

description for this stanza and what it does is in http://docs.splunk.com/Documentation/Splunk/latest/Admin/Serverconf

,

[thomasje]

I got the same error "Upload failed with ERROR : Read Timeout". Please help

[Tdot]

1. Browse to the location of "server.conf" file assuming you've installed Splunk in /opt/splunk and edit it: $ sudo nano /opt/splunk/etc/system/local/server.conf

2. From the "server.conf" file, go to the bottom of the screen and in a new line, press Enter and then add:

[diskUsage]

minFreeSpace = 10

3.  Save the "server.conf" file

4. Restart Splunk Service: $ sudo /opt/splunk/bin/splunk  stop

5. Upload the file.