First, please check the Splunk log with: grep -Ei 'LocalAppsAdminHandler|apps_dump|archived_apps_dump|services/apps/local|read operation timed out|Connect Timeout|splunkd daemon is not responding' \ /opt/splunk/var/log/splunk/splunkd.log | tail -100 If the output contains errors such as: Could not fetch apps from apps dump Could not fetch apps from archived apps dump Error connecting: Connect Timeout then add the following configuration to: /opt/splunk/etc/system/local/server.conf [applicationsManagement] allowInternetAccess = false Then restart Splunk: /opt/splunk/bin/splunk restart This should resolve the Splunk Web 503 issue caused by the Splunkbase app-dump connection timeouts. Happy Splunk ... View more

What I received from Splunk support: I would like to inform you that an estimated release date for the version that will fix the vulnerability for version 9.4.7,9.2.11 versions will be released by the end of December and for the 9.3.9,10.0.3 versions, we have an estimated time of arrival (ETA) of the end of March 2026.     ... View more

Here is the best answer: To resolve the issue, please log in to Splunk and reload the deploy server: $ /opt/splunk/bin/splunk login Splunk username: admin  # (use your actual username) Password: $ /opt/splunk/bin/splunk reload deploy-server -class XYZ This will reload the specified server class(es). ... View more

Here is the best answer: To resolve the issue, please log in to Splunk and reload the deploy server: $ /opt/splunk/bin/splunk login Splunk username: admin  # (use your actual username) Password: $ /opt/splunk/bin/splunk reload deploy-server -class XYZ This will reload the specified server class(es). ... View more

Here is the best answer: To resolve the issue, please log in to Splunk and reload the deploy server: $ /opt/splunk/bin/splunk login Splunk username: admin  # (use your actual username) Password: $ /opt/splunk/bin/splunk reload deploy-server -class XYZ This will reload the specified server class(es). ... View more

For your information: To resolve the issue, please log in to Splunk and reload the deploy server: $ /opt/splunk/bin/splunk login Splunk username: admin # (use your actual username) Password: $ /opt/splunk/bin/splunk reload deploy-server -class XYZ This will reload the specified server class(es). ... View more

In /opt/splunk/etc/system/local/limits.conf   [search] max_searches_per_cpu = 12   and then restart the splunk ... View more

$Splunk_DB/kvstore/mongo $SPLUNK_DB , by default, is located in $SPLUNK_HOME/var/lib/splunk ... View more