Getting Data In

Why is the summary index backfill script failing to run and says timeout?

Prakash493
Communicator

Hi , i am running the script for summary indexing backfill , after running few times its getting failed says time out ? what will be the issue ?

le "/opt/splunk/lib/python2.7/site-packages/splunk/rest/__init__.py", line 500, in simpleRequest
    raise splunk.SplunkdConnectionException,  'Error connecting to %s: %s' % (path, str(e))
splunk.SplunkdConnectionException: Splunkd daemon is not responding: ("Error connecting to /servicesNS/dgk1/search/saved/searches , The read operation timeout
0 Karma
1 Solution

codebuilder
SplunkTrust
SplunkTrust

The summarization search is timing out before it can complete.
Decrease your time range or increase your parallel summarization threads.

To do that you would increase (or set) the value of auto_summarize.max_concurrent in savedsearches.conf
The default value is 1, so I would start by setting it to 2 then re-evaluate performance.

----
An upvote would be appreciated and Accept Solution if it helps!

View solution in original post

0 Karma

codebuilder
SplunkTrust
SplunkTrust

The summarization search is timing out before it can complete.
Decrease your time range or increase your parallel summarization threads.

To do that you would increase (or set) the value of auto_summarize.max_concurrent in savedsearches.conf
The default value is 1, so I would start by setting it to 2 then re-evaluate performance.

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

Prakash493
Communicator

Thank you so much for info

0 Karma

codebuilder
SplunkTrust
SplunkTrust

Sure, glad to help!

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...