Splunkd daemon is not responding: ('Error connecting to /services/admin/sh_indexes_manager/: The read operation timed out',)
No indexes were found
- After refreshing the page, the respective index loads and the error disappears.- The issue was arising due to the fact that splunkd was timing out. So, the default value of 30 seconds is hitting for splunkdConnectionTimeout in web.conf.
splunkdConnectionTimeout = <integer> * The amount of time, in seconds, to wait before timing out when communicating with splunkd. * Must be at least 30. * Values smaller than 30 will be ignored, resulting in the use of the default value * Default: 30
Workaround -
1. Increased the value of splunkdConnectionTimeout from 30 to 300 seconds in the local directory of web.conf.
-Under $SPLUNK_HOME/etc/system/local/web.conf -
[settings]
splunkdConnectionTimeout = 330
2. Performed a rolling restart of the search heads.
| Revision | Publish Date | Comments |
|---|---|---|
1.0 |
29-Sep-2026
|
Initial Release |