Getting Data In

Why is the summary index backfill script failing to run and says timeout?

Prakash493
Communicator

Hi , i am running the script for summary indexing backfill , after running few times its getting failed says time out ? what will be the issue ?

le "/opt/splunk/lib/python2.7/site-packages/splunk/rest/__init__.py", line 500, in simpleRequest
    raise splunk.SplunkdConnectionException,  'Error connecting to %s: %s' % (path, str(e))
splunk.SplunkdConnectionException: Splunkd daemon is not responding: ("Error connecting to /servicesNS/dgk1/search/saved/searches , The read operation timeout
0 Karma
1 Solution

codebuilder
SplunkTrust
SplunkTrust

The summarization search is timing out before it can complete.
Decrease your time range or increase your parallel summarization threads.

To do that you would increase (or set) the value of auto_summarize.max_concurrent in savedsearches.conf
The default value is 1, so I would start by setting it to 2 then re-evaluate performance.

----
An upvote would be appreciated and Accept Solution if it helps!

View solution in original post

0 Karma

codebuilder
SplunkTrust
SplunkTrust

The summarization search is timing out before it can complete.
Decrease your time range or increase your parallel summarization threads.

To do that you would increase (or set) the value of auto_summarize.max_concurrent in savedsearches.conf
The default value is 1, so I would start by setting it to 2 then re-evaluate performance.

----
An upvote would be appreciated and Accept Solution if it helps!

View solution in original post

0 Karma

Prakash493
Communicator

Thank you so much for info

0 Karma

codebuilder
SplunkTrust
SplunkTrust

Sure, glad to help!

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!