Hi , i am running the script for summary indexing backfill , after running few times its getting failed says time out ? what will be the issue ?
le "/opt/splunk/lib/python2.7/site-packages/splunk/rest/__init__.py", line 500, in simpleRequest raise splunk.SplunkdConnectionException, 'Error connecting to %s: %s' % (path, str(e)) splunk.SplunkdConnectionException: Splunkd daemon is not responding: ("Error connecting to /servicesNS/dgk1/search/saved/searches , The read operation timeout
The summarization search is timing out before it can complete.
Decrease your time range or increase your parallel summarization threads.
To do that you would increase (or set) the value of autosummarize.maxconcurrent in savedsearches.conf
The default value is 1, so I would start by setting it to 2 then re-evaluate performance.