Faulting application splunkd.exe on Win2003 x86 Servers

ccit — Wed, 17 Nov 2010 00:31:51 GMT

I have installed Splunk as a forwarder/light forwarder on a few of our Win2003 x86 servers as a test and am receiving around 5 application errors each day as follows:

Event Type: Error
Event Source:   Application Error
Event Category: (100)
Event ID:   1000
Date:       16/11/2010
Time:       08:41:00
User:       N/A
Computer:   CC-TEMPFILE-LDN
Description:
Faulting application splunkd.exe, version 0.0.0.0, faulting module splunkd.exe, version 0.0.0.0, fault address 0x00442572.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 73 70 6c   ure  spl
0018: 75 6e 6b 64 2e 65 78 65   unkd.exe
0020: 20 30 2e 30 2e 30 2e 30    0.0.0.0
0028: 20 69 6e 20 73 70 6c 75    in splu
0030: 6e 6b 64 2e 65 78 65 20   nkd.exe 
0038: 30 2e 30 2e 30 2e 30 20   0.0.0.0 
0040: 61 74 20 6f 66 66 73 65   at offse
0048: 74 20 30 30 34 34 32 35   t 004425
0050: 37 32                     72

Any idea's as to what's going on? It seems ok on workstations (XP), just some severs forwarding event logs and running Windows App to forward WMI info on cpu, disk, processes & Net.

Re: Faulting application splunkd.exe on Win2003 x86 Servers

heterodyned — Sat, 12 Feb 2011 15:06:38 GMT

I am also facing the same issue ! 😞 with splunkd and splunk-regmon

Re: Faulting application splunkd.exe on Win2003 x86 Servers

heterodyned — Sun, 13 Mar 2011 16:49:46 GMT

Please verify if there is any scheduled AV scans running in these machines, if they are then its probable that your scheduled AV scans may be breaking splunk process, I had the same issue with windows servers ( its also mentioned in the release document)

topic Re: Faulting application splunkd.exe on Win2003 x86 Servers in Getting Data In

Faulting application splunkd.exe on Win2003 x86 Servers

Re: Faulting application splunkd.exe on Win2003 x86 Servers

Re: Faulting application splunkd.exe on Win2003 x86 Servers