Getting Data In

Why is our [httpserver] maxThreads limit parameter in server.conf not being applied?

stevepraz
Path Finder

We were receiving errors similar to this message due to running out of http rest connections on some of our Splunk indexers.

11-16-2015 09:38:15.180 -0500 WARN  HttpListener - Can't handle request for /services/server/info, max thread limit for REST HTTP server is 1023, threads already in use is 1023

We referenced an article on this site (https://answers.splunk.com/answers/322462/why-are-our-rest-limits-so-low-how-do-we-change-th.html?ut...) that linked back to this documentation: http://docs.splunk.com/Documentation/Splunk/6.3.0/Troubleshooting/HTTPthreadlimitissues

We made the config changes in the /etc/system/local/server.conf like below:

[httpserver]
maxThreads = 65536

However, it doesn't appear to have stuck and we are still seeing the max thread issue errors. Any ideas?

0 Karma
1 Solution

johnberwick
Splunk Employee
Splunk Employee

The was a spelling mistake on the website should have been a upper case S in Server

[httpServer]
maxThreads = 65536

View solution in original post

0 Karma

johnberwick
Splunk Employee
Splunk Employee

The was a spelling mistake on the website should have been a upper case S in Server

[httpServer]
maxThreads = 65536

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...