Security

Splunkd daemon is not responding: ('The read operation timed out',)

tsunamii
Path Finder

Splunk version 4.3.3 on Windows

Unable to log into splunk web (UI), and got the following error instead: Splunkd daemon is not responding: ('The read operation timed out',)

Error from splunkd.log:

2012-08-31 14:16:03,664 INFO [50412993a630a5d30] root:133 - ENGINE: Started monitor thread 'Monitor'.
2012-08-31 14:17:12,663 ERROR [504129ba8930a5fd0] view:1174 - Splunkd daemon is not responding: ('The read operation timed out',)
Traceback (most recent call last):
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\controllers\view.py", line 1172, in setViewstate
viewstate.commit(vs)
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\lib\viewstate.py", line 172, in commit
en.setEntity(entityWrapper)
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\entity.py", line 296, in setEntity
if rest.checkResourceExists(uri, sessionKey=sessionKey):
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\rest_init.py", line 497, in checkResourceExists
serverResponse, serverContent = simpleRequest(uri, sessionKey)
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\rest__init
.py", line 396, in simpleRequest
raise splunk.SplunkdConnectionException, str(e)
SplunkdConnectionException: Splunkd daemon is not responding: ('The read operation timed out',)
2012-08-31 14:17:12,663 ERROR [504129baa232b8668] search:232 - Splunkd daemon is not responding: ('The read operation timed out',)
Traceback (most recent call last):
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\controllers\search.py", line 229, in dispatchJob
job = splunk.search.dispatch(q, sessionKey=cherrypy.session['sessionKey'], **options)
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\search__init
.py", line 268, in dispatch
serverResponse, serverContent = rest.simpleRequest(uri, postargs=args, sessionKey=sessionKey, rawResult=True)
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\rest__init
_.py", line 396, in simpleRequest
raise splunk.SplunkdConnectionException, str(e)
SplunkdConnectionException: Splunkd daemon is not responding: ('The read operation timed out',)
2012-08-31 14:17:27,279 INFO [50412974fe1d80a90] root:133 - ENGINE: Bus STOPPING
2012-08-31 14:17:29,480 INFO [50412974fe1d80a90] root:133 - ENGINE: HTTP Server cherrypy._cpwsgi_server.CPWSGIServer(('0.0.0.0', 8443)) shut down
2012-08-31 14:17:29,542 INFO [50412974fe1d80a90] root:133 - ENGINE: Stopped thread 'Monitor'.
2012-08-31 14:17:29,605 INFO [50412974fe1d80a90] root:133 - ENGINE: Stopped thread '_TimeoutMonitor'.
2012-08-31 14:17:29,605 INFO [50412974fe1d80a90] root:133 - ENGINE: Removed handler for console events.
2012-08-31 14:17:29,605 INFO [50412974fe1d80a90] root:133 - ENGINE: Bus STOPPED

Tags (3)

splunkIT
Splunk Employee
Splunk Employee

If your splunk is using LDAP authentication, try disabling 'Enable referrals with anonymous bind only' in LDAP connection settings to see if it will help. You may need to restart your splunk instance after the change.

Refer to here for details on the 'Enable referrals with anonymous bind only' option:

http://docs.splunk.com/Documentation/Splunk/latest/Security/SetUpUserAuthenticationWithLDAP

nmistry_splunk
Splunk Employee
Splunk Employee
0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...