https://community.splunk.com/t5/Deployment-Architecture/Splunk-instance-shut-downs-unexpectedly/m-p/353611#M20142 <P>We are using Splunk instance to pull various types of data from the server. But now days we are seeing Splunk instance shut downs unexpectedly.</P> <P>We checked for crash logs, but it is empty.</P> <P>Checked for ulimit as well which is good enough.</P> <P>Neither we have Splunk ES installed on Splunk instance nor ingesting heavy logs to Splnuk. Still we are seeing max memory and CPU utilization by Splunk.</P> <P>Unexpected shutdown behavior is really annoying and disturbing. Please provide your inputs on this issue.</P> Tue, 07 Nov 2017 07:25:52 GMT onkarkore1 2017-11-07T07:25:52Z https://community.splunk.com/t5/Deployment-Architecture/Splunk-instance-shut-downs-unexpectedly/m-p/353611#M20142 <P>We are using Splunk instance to pull various types of data from the server. But now days we are seeing Splunk instance shut downs unexpectedly.</P> <P>We checked for crash logs, but it is empty.</P> <P>Checked for ulimit as well which is good enough.</P> <P>Neither we have Splunk ES installed on Splunk instance nor ingesting heavy logs to Splnuk. Still we are seeing max memory and CPU utilization by Splunk.</P> <P>Unexpected shutdown behavior is really annoying and disturbing. Please provide your inputs on this issue.</P> Tue, 07 Nov 2017 07:25:52 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-instance-shut-downs-unexpectedly/m-p/353611#M20142 onkarkore1 2017-11-07T07:25:52Z https://community.splunk.com/t5/Deployment-Architecture/Splunk-instance-shut-downs-unexpectedly/m-p/353612#M20143 <P>Can you check server crashlogs. If it's linux box you can use </P> <PRE><CODE>dmesg | grep splunkd </CODE></PRE> <P>It may be possible that the parent OS is killing the Splunkd process .</P> Tue, 07 Nov 2017 08:48:26 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-instance-shut-downs-unexpectedly/m-p/353612#M20143 hardikJsheth 2017-11-07T08:48:26Z