Monitoring Splunk

Session timeout log

tnogi
Engager

Set the session timeout in Splunk,
When time-out and return to the login screen,
Where is the log output when logging out?

What is the message when it is output?

Tags (1)

delink
Communicator

We were trying to answer this same question and came up with nothing. There does not seem to be a log anywhere that shows a session getting reaped.

An example of a search I ran is:

index=_internal sourcetype=splunk_web_service | stats count by reason

Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...