topic Re: Why did our Splunk forwarder die getting "ERROR ProcessRunner - helper process seems to have died (child killed by signal 15: Terminated)"? in Getting Data In

Why did our Splunk forwarder die getting "ERROR ProcessRunner - helper process seems to have died (child killed by signal 15: Terminated)"?

itmonitoring — Wed, 19 Nov 2014 21:30:20 GMT

FATAL ProcessRunner - Unexpected EOF from process runner child!
ild killed by signal 1510-24-2014 06:42:23.633 -0600 ERROR ProcessRunner - helper process seems to have died (child killed by signal 15: Terminated)

Re: Why did our Splunk forwarder die getting "ERROR ProcessRunner - helper process seems to have died (child killed by signal 15: Terminated)"?

lguinn2 — Thu, 20 Nov 2014 00:35:40 GMT

Signal 15 is sent to a process by the Linux kill command. Is it possible that someone killed the process?

Re: Why did our Splunk forwarder die getting "ERROR ProcessRunner - helper process seems to have died (child killed by signal 15: Terminated)"?

itmonitoring — Mon, 08 Dec 2014 17:07:28 GMT

As per logs nobody kills it manually still looking for the reason...

Re: Why did our Splunk forwarder die getting "ERROR ProcessRunner - helper process seems to have died (child killed by signal 15: Terminated)"?

ben_leung — Wed, 15 Jul 2015 01:28:02 GMT

This also occurred on the indexer level but instead with a signal 9 in splunkd.log for version 6.0.5, is this known issue?

Re: Why did our Splunk forwarder die getting "ERROR ProcessRunner - helper process seems to have died (child killed by signal 15: Terminated)"?

yaseen417 — Tue, 12 Feb 2019 13:23:25 GMT

There's a possibility that, instead of using splunk restart/stop/start, splunkd is used which is a daemon itself.