Security

How to increase "Search Request Time limit" in advance LDAP setting

vikas_gopal
Builder

Hi Experts,

I am configuring a dynamic LDAP group with SPLUNK .This group has more then 50,000 users.My advance LDAP settings are
Search request size limit:-50,000
Search request time limit :- 25
Network socket timeout :- 27

With these above setting I am getting the follwoing Error
"Timed out while waiting for splunkd daemon to respond (Splunkd daemon is not responding: ('Error connecting to /servicesNS/-/launcher/admin/LDAP-groups: The read operation timed out',)). Splunkd may be hung."

Please suggest that how I can increase the Search Request time along with UI time out.

Thanks
VG

Tags (2)
0 Karma
1 Solution

vikas_gopal
Builder

As I did not receive any advice or answer from Splunk Community I figured this out myself. I hope it may help someone
I can increase the default limit as follows

Change in the following conf files
1) Authentication.conf
network_timeout = 1200 (previously it was 25 sec.)
sizelimit =15000 (previously it was 1000)
timelimit = 1200 (previously it was 20 sec.)

2) web.conf
# default timeout, in seconds, when communicating with splunkd
splunkdConnectionTimeout = 1201 (previously it was 30 sec.)

View solution in original post

vikas_gopal
Builder

As I did not receive any advice or answer from Splunk Community I figured this out myself. I hope it may help someone
I can increase the default limit as follows

Change in the following conf files
1) Authentication.conf
network_timeout = 1200 (previously it was 25 sec.)
sizelimit =15000 (previously it was 1000)
timelimit = 1200 (previously it was 20 sec.)

2) web.conf
# default timeout, in seconds, when communicating with splunkd
splunkdConnectionTimeout = 1201 (previously it was 30 sec.)

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...