Splunk Search

HEC - WARN HttpListener - Read Timeout communicating with x.x.x.x:61888, disconnecting

splunkhu123
Observer

 

My splunk HEC server disconnecting  the HEC connections from the clients when clients trying to send the log over HEC. I get the below error in the _internal log. 

WARN HttpListener - Read Timeout communicating with x.x.x.x:61888, disconnecting

I increased the ulimits  to below value but no success. 

ulimit -Hn 85000
ulimit -Hu 64000

Logs are getting dropped because of this timeout error.

Labels (1)
Tags (1)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.