Developing for Splunk Enterprise

Why am I getting this error: splunklib.binding.HTTPError: HTTP 404 Not Found -- Unknown sid when using the Python SDK


I have seen several posts about how getting the HTTP 404 Not Found - Unknown sid error indicates that the search timed out and offers some solutions for how to fix it from the Splunk UI. We are running a script that running a series of queries and about once a week, this daily report fails with this error. It isn't always on the same query, so I cannot point to any specific result-intensive query that is causing the problem.

Is there a way to tell Splunk, via Python, to not time out if the query takes longer? Or some kind of solution for this?

New Member

Hi, I am getting the same error. Did you solve it?

0 Karma