Getting Data In

Splunk API Time out - Powershell script

pmccomb001
New Member

I've made a script in PowerShell which utilizes the REST API input that I have. This script is for downloading extremely large amounts of data from Splunk.

The problem that I am having is that Invoke-WebRequest is timing out and I cannot get the query to complete. The query stays connected for ~5minutes and times out.

0 Karma

pmccomb001
New Member

Thanks for the response but the solution is not working. Folks had the same results in this thread:
https://stackoverflow.com/questions/34136088/invoke-webrequest-set-time-out

0 Karma

pmccomb001
New Member

Thanks for a response but this is still not working. Folks have the same results in this thread:
https://stackoverflow.com/questions/34136088/invoke-webrequest-set-time-out

Any other thoughts?

0 Karma

efavreau
SplunkTrust
SplunkTrust

@pmccomb001 Set this in your powershell profile, or run beforehand:

[System.Net.ServicePointManager]::MaxServicePointIdleTime = 5000000

Then when you run Invoke-WebRequest make sure you have the TimeoutSec parameter set to zero:

Invoke-WebRequest therestofyourcommand -TimeoutSec 0
###

If this reply helps you, an upvote would be appreciated.
0 Karma

pmccomb001
New Member

Thanks for the response but this is still not working. Folks had the same issue in this thread:
https://stackoverflow.com/questions/34136088/invoke-webrequest-set-time-out

0 Karma

pmccomb001
New Member

Any other thoughts/ideas?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...