Getting Data In

Why is the summary index backfill script failing to run and says timeout?

Prakash493
Communicator

Hi , i am running the script for summary indexing backfill , after running few times its getting failed says time out ? what will be the issue ?

le "/opt/splunk/lib/python2.7/site-packages/splunk/rest/__init__.py", line 500, in simpleRequest
    raise splunk.SplunkdConnectionException,  'Error connecting to %s: %s' % (path, str(e))
splunk.SplunkdConnectionException: Splunkd daemon is not responding: ("Error connecting to /servicesNS/dgk1/search/saved/searches , The read operation timeout
0 Karma
1 Solution

codebuilder
Influencer

The summarization search is timing out before it can complete.
Decrease your time range or increase your parallel summarization threads.

To do that you would increase (or set) the value of auto_summarize.max_concurrent in savedsearches.conf
The default value is 1, so I would start by setting it to 2 then re-evaluate performance.

----
An upvote would be appreciated and Accept Solution if it helps!

View solution in original post

0 Karma

codebuilder
Influencer

The summarization search is timing out before it can complete.
Decrease your time range or increase your parallel summarization threads.

To do that you would increase (or set) the value of auto_summarize.max_concurrent in savedsearches.conf
The default value is 1, so I would start by setting it to 2 then re-evaluate performance.

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

Prakash493
Communicator

Thank you so much for info

0 Karma

codebuilder
Influencer

Sure, glad to help!

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...