REST API question: does sessionKey ever expire or can it only be revoked?

[the_wolverine]

Will a generated sessionKey ever, on its own, expire or must it be revoked? I want to ensure that users can continue to use sessionKey provided to them without worrying about expiration.

[dart · Accepted solution]

I believe that the sessionKey expires according to the splunkd session timeout.