Lost or Splunk Web may be down.

[MrWh1t3]

I'm running Active Directory app and keep getting the Splunk Web may be down error. This question appears to be answered, but I don't consider it an answer if it doesn't solve the issue. Does anyone know if there has been a "hack" or workaround for this?

http://splunk-base.splunk.com/answers/7904/splunkweb-your-network-connection-may-have-been-lost-or-s...

[Drainy · Accepted solution]

Well there isn't really any sort of hack to fix this, essentially it means your system is under load and you may need to look at increasing some of the specifications to help it cope.

The AD app itself is quite intensive as it runs a lot of ad-hoc commands to pull in additional data as needed. Yiu may find it helps to split off some functionality / apps to a search head if you don't have one already.

[MrWh1t3]

I believe it was the heavy load and lack of power in the thin clients. Everything worked fine today.

[MrWh1t3]

You know, I will check tomorrow. Now that I think about it I was viewing splunkweb via a thin client. It's quite possible that it simply timed out due to the latency we sometimes see with our things clients. I'll report back.