As I did not receive any advice or answer from Splunk Community I figured this out myself. I hope it may help someone I can increase the default limit as follows Change in the following conf files 1) Authentication.conf network_timeout = 1200 (previously it was 25 sec.) sizelimit =15000 (previously it was 1000) timelimit = 1200 (previously it was 20 sec.) 2) web.conf # default timeout, in seconds, when communicating with splunkd splunkdConnectionTimeout = 1201 (previously it was 30 sec.) ... View more

Strange even after seen my question by different experts by 36 times no one has provided any advice or solution ,but I cracked it my own .I hope it may help someone. I can increase the limit as follows 1) Authentication.conf network_timeout = 1200 (previously it was 25 sec.) sizelimit =15000 (previously it was 1000) timelimit = 1200 (previously it was 20 sec.) 2) web.conf # default timeout, in seconds, when communicating with splunkd splunkdConnectionTimeout = 1201 (previously it was 30 sec.) ... View more

Finally I figured it out, so here are the steps to build a package 1) we have 2 different ways to build a package With CLI or Zipping the app folder 2) For Zipping you just need to download 7 zip software and zip your app in .tar extension .Why “.tar” because Splunk reads or load “.tar or .spl” apps only. Once you zip your app you can paste it to the fresh spluk instance/other machine and with the help of manage app create app from file you can install this app. Repeat the same steps for DB connect app or add on. 3) Second method to build an app package is CLI and with this method you will get .spl file and for this open cmd $Home$/splunk/bin Now type Splunk package app abc (here abc is you app name) Here system will ask username and password, that is it you can check your .spl file in the following location $Home$/Splunk/etc/system/static/app-packages The easiest way to build package is with CLI ... View more

I achieved this with labels .I mean use labels rather than text or text area. ... View more