Is there a log that would state why my session was disconnected?

[a212830]

Hi,

Is there a log that would state when/why a splunk browser session was disconnected? We are getting these in prod, so I setup a test env, and they are still happening, but I don't see anything logged that says why.

[sloshburch]

Elaborate on "splunk browser session was disconnected" Are you seeing a specific error message?

I know that use of the /debug/refresh will boot sessions. Of course, there are session timeout conf settings that could be in use to limit an inactive session...but it sounds like you are talking about active sessions? (maybe clarify as well)

[deepashri_123]

Hey@a212830,

What version of Splunk are you using?
Can you check if you are facing similar problem:
https://answers.splunk.com/answers/654411/splunk-710-upgrade-of-free-version-finalizes-searc.html?ch...

Let me know if this helps!!!

[sudosplunk]

Hello,

I think you're looking for web_service.log. index=_internal sourcetype=splunk_web_service

Python.log and troubleshooting manual have some information worth looking for.