Unless advised by Support, it's probably not a good idea to modify the conf_replication_max_pull_count setting.
The WARN itself is not necessarily a problem, unless it corresponds to slow UI response times and/or general system problems.
In general, note that this message is based on wallclock time. That means any performance problem on the system – e.g. memory pressure or contention for CPU – can cause this WARN. It isn't always a problem with the configuration replication workload itself.
If the WARN message corresponds to slow UI response times and/or general system problems, then please contact Support and provide the following artifacts for further analysis:
1.) Collect new diags from captain and from at least one of the member nodes
2.) On each of the search heads, please take of backup of the latest bundle file under var/run/splunk/snapshot to a temporary directory, and provide them as well
... View more