ERROR: "Error connecting to /<...>/LDAP/DEFRAS04: The read operation timed out".

Available Languages

Updated:September 29, 2026
Document ID:SPLK046119

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Applicability

Splunk Enterprise

Investigation

While configuring LDAP on a new Splunk install to be the same as the existing one which works, we are receiving a timeout message when clicking on "Save".
  
Encountered the following error while trying to update: Splunkd daemon is not responding: 
('Error connecting to /servicesNS/nobody/system/authentication/providers/LDAP/DEFRAS04: 
The read operation timed out',)

Resolution

If after setting up LDAP you get the "The read operation timed out'" error message, you need to increase the Connection time out.

On web.conf 
splunkdConnectionTimeout = 300

According to documentation:
  
splunkdConnectionTimeout = <integer>
* The amount of time, in seconds, to wait before timing out when communicating with
  splunkd.
* Must be at least 30.
* Values smaller than 30 will be ignored, resulting in the use of the
  default value
* Default: 30

Splunk Documentation:
web.conf

Revision History

Revision Publish Date Comments
1.0
29-Sep-2026
Initial Release

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products

Related Articles