Issue in Saviynt add-on for Splunk

[smithamg]

Hi team,

I am not able to respond to below discussion hence starting a new one

Splunk Add-On Retry on Failure - Saviynt Forums - 31395

We are facing same issue with Splunk add on @Sivagami @Rishi please let me know if this is resolved for you.

The issue is that we are only getting 1~100 logs from analytics report and when we check the Splunk internal logs, the only error we can see is timeout error. Expected entries (or logs) expected from that is upwards of 80k.

Error in calling Saviynt APIs - Control execution is taking longer than expected. You will be notified when the result is read

Same error we are seeing when we try to fetch records from postman. We have tried changing the HTTP timeout from 90 (default) to 9000. 

Thanks,

Smitha

[rushikeshvartak]

How frequently running report. We run every 1 minutes

[krishna_sk]

Hi @rushikeshvartak 

We are running at a frequency of once a day.

Thank you.

[rushikeshvartak]

If report analytics entry exceeds more than 4M then above message is expected. Please change schedule to every 30 minutes