Security

How to increase "Search Request Time limit" in advance LDAP setting

vikas_gopal
Builder

Hi Experts,

I am configuring a dynamic LDAP group with SPLUNK .This group has more then 50,000 users.My advance LDAP settings are
Search request size limit:-50,000
Search request time limit :- 25
Network socket timeout :- 27

With these above setting I am getting the follwoing Error
"Timed out while waiting for splunkd daemon to respond (Splunkd daemon is not responding: ('Error connecting to /servicesNS/-/launcher/admin/LDAP-groups: The read operation timed out',)). Splunkd may be hung."

Please suggest that how I can increase the Search Request time along with UI time out.

Thanks
VG

Tags (2)
0 Karma
1 Solution

vikas_gopal
Builder

As I did not receive any advice or answer from Splunk Community I figured this out myself. I hope it may help someone
I can increase the default limit as follows

Change in the following conf files
1) Authentication.conf
network_timeout = 1200 (previously it was 25 sec.)
sizelimit =15000 (previously it was 1000)
timelimit = 1200 (previously it was 20 sec.)

2) web.conf
# default timeout, in seconds, when communicating with splunkd
splunkdConnectionTimeout = 1201 (previously it was 30 sec.)

View solution in original post

vikas_gopal
Builder

As I did not receive any advice or answer from Splunk Community I figured this out myself. I hope it may help someone
I can increase the default limit as follows

Change in the following conf files
1) Authentication.conf
network_timeout = 1200 (previously it was 25 sec.)
sizelimit =15000 (previously it was 1000)
timelimit = 1200 (previously it was 20 sec.)

2) web.conf
# default timeout, in seconds, when communicating with splunkd
splunkdConnectionTimeout = 1201 (previously it was 30 sec.)

Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...