Error running https://<server>:8000/en-US/debug/refresh

[tjmurphyjr]

Error running https://<server>:8000/en-US/debug/refresh

I have recently started receiving a 503 error when trying to execute the debug refresh feature. This has worked just fine previously. I receive this error after pressing "Refresh" button on the https://<server>:8000/en-US/debug/refresh page

v7.2.7
Enterprise Security server
splunkd is running
Normal Slunk UI is accessible just fine
Unable to correlate error with any message(s) in splunkd.log (not saying there are none - just nothing that I can make sense of with regard to this)

**************
503 Service Unavailable
Oops.
The splunkd daemon cannot be reached by splunkweb. Check that there are no blocked network ports or that splunkd is still running. Click here to return to Splunk homepage.

<Confused equine>
**************

[_joe]

Were you ever able to resolve this? I've noticed this slowly started happening to one of my more busy servers.

[tjmurphyjr]

Joe,

I wound up opening a ticket with Splunk support. They had me increase this value and we have not had any issues since (it takes longer than 90 to actually refresh but it seems to be OK with that)

Default is 30

$SPLUNK_HOME/etc/system/local/web.conf
[settings]
splunkdConnectionTimeout = 90