Getting Data In

Splunk API Time out - Powershell script

pmccomb001
New Member

I've made a script in PowerShell which utilizes the REST API input that I have. This script is for downloading extremely large amounts of data from Splunk.

The problem that I am having is that Invoke-WebRequest is timing out and I cannot get the query to complete. The query stays connected for ~5minutes and times out.

0 Karma

pmccomb001
New Member

Thanks for the response but the solution is not working. Folks had the same results in this thread:
https://stackoverflow.com/questions/34136088/invoke-webrequest-set-time-out

0 Karma

pmccomb001
New Member

Thanks for a response but this is still not working. Folks have the same results in this thread:
https://stackoverflow.com/questions/34136088/invoke-webrequest-set-time-out

Any other thoughts?

0 Karma

efavreau
SplunkTrust
SplunkTrust

@pmccomb001 Set this in your powershell profile, or run beforehand:

[System.Net.ServicePointManager]::MaxServicePointIdleTime = 5000000

Then when you run Invoke-WebRequest make sure you have the TimeoutSec parameter set to zero:

Invoke-WebRequest therestofyourcommand -TimeoutSec 0
###

If this reply helps you, an upvote would be appreciated.
0 Karma

pmccomb001
New Member

Thanks for the response but this is still not working. Folks had the same issue in this thread:
https://stackoverflow.com/questions/34136088/invoke-webrequest-set-time-out

0 Karma

pmccomb001
New Member

Any other thoughts/ideas?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It ...

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

AI + Observability: AI Agents, LLMs, Apps, & Infrastructure The rapid evolution of artificial intelligence ...