Splunk forwarder (version 7.2.2) creating zombie thread.

sreechallagundl — Thu, 18 Apr 2019 14:19:59 GMT

We recently installed Splunk forwarder v 7.2.2 the moment it started creating a defunct PID with SYSTEMCLT. I want to know why this keeps on happening. Let us know if we need to change something.

FYI..

Z     5820  7359 systemctl

-->

4 S root      5820     1  0  80   0 - 96658 ep_pol Apr12 ?        00:04:43 splunkd --under-systemd --systemd-delegate=yes -p 8089 _internal_launch_under_systemd
4 Z root      7359  5820  0  80   0 -     0 do_exi Apr12 ?        00:00:00 [systemctl] 
5 S root      7458  5820  0  80   0 - 21465 ep_pol Apr12 ?        00:00:00 [splunkd pid=5820] splunkd --under-systemd --systemd-delegate=yes -p 8089 _internal_launch_under_systemd [process-runner]

Re: Splunk forwarder (version 7.2.2) creating zombie thread.

ptcrusher — Mon, 20 May 2019 09:36:23 GMT

Were you able to sort it out? I'm facing the exact same issue

Thanks in advance

topic Splunk forwarder (version 7.2.2) creating zombie thread. in All Apps and Add-ons

Splunk forwarder (version 7.2.2) creating zombie thread.

Re: Splunk forwarder (version 7.2.2) creating zombie thread.