I've created an app and wanted to package it before shipping it to another splunk instance. From the console, I entered
./splunk package app app_name
But after a while, I get
Socket error communicating with splunkd (error=('The read operation timed out',)), path = /services/apps/local/app_name/package
What's happening here?
There is a lookup file in my app that is somewhat large (>100 mb) which fails the entire operation.
I removed the lookup file from the app, packaged it and placed the file separately (it has to be added manually after installing the app).
View solution in original post