Forum Discussion

Alan_B__139698's avatar
Alan_B__139698
Icon for Altostratus rankAltostratus
Oct 19, 2018

Splunk "sticky" persistence issue - random disconnects

I'm load balancing a pool of three Splunk servers using "cookie" as my primary persistence, and "source_addr" as my fallback, however I've received complaints of random disconnects from users. Might this be a persistence issue? Has anyone else experienced this? The F5's running BIG-IP 12.1.3.6 Build 0.0.3.

 

Thanks!

 

application delivery
LTM
persistence
splunk
  • Fallout1984's avatar
    Fallout1984
    Icon for Cirrocumulus rankCirrocumulus
    Oct 19, 2018

    Searching Splunk during one of the reported disconnect times shows messages with this...

     

    http_process_state_prepend - Invalid action:0x109010 Server sends too much data.

     

    …which is discussed here:

     

    https://support.f5.com/csp/article/K42151600

     

    What I’ve done per the article is set the http profile to “none.” In so doing, cookie persistence is no longer a valid option for “stickiness” so I’ve set it to source address.