We were receiving errors similar to this message due to running out of http rest connections on some of our Splunk indexers.
11-16-2015 09:38:15.180 -0500 WARN HttpListener - Can't handle request for /services/server/info, max thread limit for REST HTTP server is 1023, threads already in use is 1023
We referenced an article on this site (https://answers.splunk.com/answers/322462/why-are-our-rest-limits-so-low-how-do-we-change-th.html?ut...) that linked back to this documentation: http://docs.splunk.com/Documentation/Splunk/6.3.0/Troubleshooting/HTTPthreadlimitissues
We made the config changes in the /etc/system/local/server.conf like below:
[httpserver]
maxThreads = 65536
However, it doesn't appear to have stuck and we are still seeing the max thread issue errors. Any ideas?
