https://community.splunk.com/t5/Getting-Data-In/splunk-forwarder-6-2-4-crash/m-p/136978#M28199 <P>Hi,</P> <P>This is related to a big introduced in 6.2.4, the fix is included in 6.2.5 which is available for download</P> <P>2015-8-11 SPL-104017 Splunkd crash due to assertion failure in Tailing.</P> Wed, 12 Aug 2015 06:49:23 GMT guilmxm 2015-08-12T06:49:23Z https://community.splunk.com/t5/Getting-Data-In/splunk-forwarder-6-2-4-crash/m-p/136977#M28198 <P>Backtrace:<BR /> [0x000000391D032625] gsignal + 53 (/lib64/libc.so.6)<BR /> [0x000000391D033E05] abort + 373 (/lib64/libc.so.6)<BR /> [0x000000391D02B74E] ? (/lib64/libc.so.6)<BR /> [0x000000391D02B810] __assert_perror_fail + 0 (/lib64/libc.so.6)<BR /> [0x000000000099145A] ? (splunkd)<BR /> [0x000000000098D582] _ZNK11TailWatcher12setupConfigsER15WatchedTailFile + 1474 (splunkd)<BR /> [0x000000000098D692] _ZNK11TailWatcher19initializeFileStateER15WatchedTailFileRK8Pathname + 66 (splunkd)<BR /> [0x00000000009904B2] _ZN11TailWatcher11fileChangedEP16WatchedFileStateRK7Timeval + 242 (splunkd)<BR /> [0x0000000000EC2602] _ZN30FilesystemChangeInternalWorker15callFileChangedER7TimevalP16WatchedFileState + 114 (splunkd)<BR /> [0x0000000000EC3F90] _ZN30FilesystemChangeInternalWorker12when_expiredERy + 464 (splunkd)<BR /> [0x0000000000F53B2D] _ZN11TimeoutHeap18runExpiredTimeoutsER7Timeval + 301 (splunkd)<BR /> [0x0000000000EBD818] _ZN9EventLoop3runEv + 744 (splunkd)<BR /> [0x000000000098E9ED] _ZN11TailWatcher3runEv + 141 (splunkd)<BR /> [0x000000000099428A] _ZN13TailingThread4mainEv + 154 (splunkd)<BR /> [0x0000000000F5165E] _ZN6Thread8callMainEPv + 62 (splunkd)<BR /> [0x000000391D8079D1] ? (/lib64/libpthread.so.0)<BR /> [0x000000391D0E88FD] clone + 109 (/lib64/libc.so.6)<BR /> Linux / dggtsp104-or / 2.6.32-431.20.3.el6.x86_64 / #1 SMP Fri Jun 6 18:30:54 EDT 2014 / x86_64<BR /> Last few lines of stderr (may contain info on assertion failure, but also could be old):<BR /> 2015-07-22 15:39:57.112 +0800 splunkd started (build 271043)<BR /> 2015-07-22 15:41:07.464 +0800 Interrupt signal received<BR /> 2015-07-22 15:41:13.389 +0800 splunkd started (build 271043)<BR /> Conf mutator lockfile has disappeared; error condition possible.<BR /> 2015-07-22 15:46:30.551 +0800 splunkd started (build 271043)<BR /> Conf mutator lockfile has disappeared; error condition possible.<BR /> 2015-07-22 15:50:47.434 +0800 splunkd started (build 271043)<BR /> splunkd: /home/build/build-src/6.2.4/src/pipeline/input/Tailing.h:120: bool StatWrap::isDir() const: Assertion `_valid' failed.</P> <P>/etc/redhat-release: Red Hat Enterprise Linux Server release 6.5 (Santiago)<BR /> glibc version: 2.12<BR /> glibc release: stable<BR /> Last errno: 2<BR /> Threads running: 31<BR /> argv: [splunkd -p 8089 restart]<BR /> Thread: "MainTailingThread", did_join=0, ready_to_run=Y, main_thread=N<BR /> First 8 bytes of Thread token @0x7fd98c81e150:<BR /> 00000000 00 f7 7f 8c d9 7f 00 00 |........|<BR /> 00000008</P> Tue, 29 Sep 2020 06:47:00 GMT https://community.splunk.com/t5/Getting-Data-In/splunk-forwarder-6-2-4-crash/m-p/136977#M28198 ross0nero 2020-09-29T06:47:00Z https://community.splunk.com/t5/Getting-Data-In/splunk-forwarder-6-2-4-crash/m-p/136978#M28199 <P>Hi,</P> <P>This is related to a big introduced in 6.2.4, the fix is included in 6.2.5 which is available for download</P> <P>2015-8-11 SPL-104017 Splunkd crash due to assertion failure in Tailing.</P> Wed, 12 Aug 2015 06:49:23 GMT https://community.splunk.com/t5/Getting-Data-In/splunk-forwarder-6-2-4-crash/m-p/136978#M28199 guilmxm 2015-08-12T06:49:23Z