I have seen several posts about how getting the HTTP 404 Not Found - Unknown sid error indicates that the search timed out and offers some solutions for how to fix it from the Splunk UI. We are running a script that running a series of queries and about once a week, this daily report fails with this error. It isn't always on the same query, so I cannot point to any specific result-intensive query that is causing the problem.
Is there a way to tell Splunk, via Python, to not time out if the query takes longer? Or some kind of solution for this?
