Getting Data In

Splunk API Time out - Powershell script

pmccomb001
New Member

I've made a script in PowerShell which utilizes the REST API input that I have. This script is for downloading extremely large amounts of data from Splunk.

The problem that I am having is that Invoke-WebRequest is timing out and I cannot get the query to complete. The query stays connected for ~5minutes and times out.

0 Karma

pmccomb001
New Member

Thanks for the response but the solution is not working. Folks had the same results in this thread:
https://stackoverflow.com/questions/34136088/invoke-webrequest-set-time-out

0 Karma

pmccomb001
New Member

Thanks for a response but this is still not working. Folks have the same results in this thread:
https://stackoverflow.com/questions/34136088/invoke-webrequest-set-time-out

Any other thoughts?

0 Karma

efavreau
SplunkTrust
SplunkTrust

@pmccomb001 Set this in your powershell profile, or run beforehand:

[System.Net.ServicePointManager]::MaxServicePointIdleTime = 5000000

Then when you run Invoke-WebRequest make sure you have the TimeoutSec parameter set to zero:

Invoke-WebRequest therestofyourcommand -TimeoutSec 0
###

If this reply helps you, an upvote would be appreciated.
0 Karma

pmccomb001
New Member

Thanks for the response but this is still not working. Folks had the same issue in this thread:
https://stackoverflow.com/questions/34136088/invoke-webrequest-set-time-out

0 Karma

pmccomb001
New Member

Any other thoughts/ideas?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

The surge in machine data is already hitting enterprise budgets, and the agentic era will only intensify it. ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...