Getting Data In

Timeout talking to Deployment Server Windows

jwhughes58
Contributor

I'm seeing this message in the splunkd.log file just before a Universal Forwarder starts a shutdown.

11-25-2017 18:38:11.690 -0800 INFO  NetUtils - Connect timeout - waited for 5 seconds. ip=aaa.bbb.ccc.ddd port=8089
11-25-2017 18:38:11.690 -0800 WARN  HTTPClient - Connect to=deployment_server:8089 timed out; exceeded 5sec
11-25-2017 18:38:11.690 -0800 WARN  HTTPClient - Download file cancelled due to: Connect to=deployment_server:8089 timed out; exceeded 5sec

I'm trying to figure out if the value of 5 seconds can be changed. I haven't found any file with 5 seconds in it. Any ideas where the value of 5 seconds comes from?

TIA,
Joe

0 Karma

woodcock
Esteemed Legend

You can specify a different check-in interval on a per client, or per class basis by tuning the phoneHomeIntervalInSecs and handshakeRetryIntervalInSecs parameters in deploymentclient.conf:
http://docs.splunk.com/Documentation/Splunk/latest/Admin/Deploymentclientconf

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...