All,
I am having an issue with splunk and uploading Pcap files to the server we are running on prem. When I attempt to upload a Pcap file via the data inputs option I receive the following error.
Encountered the following error while trying to save: Splunkd daemon is not responding: ('Error connecting to /servicesNS/admin/launcher/data/inputs/upload_pcap: The read operation timed out',)
My thinking is it could be too big and is timing out the daemon. If that is the case can this timeout be edited?
Pcap files are in the 139MB size range.
Thank you for any recommendations or insight.
... View more