topic How to troubleshoot why splunkd keeps crashing every two days on Windows? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240341#M46701 <P>Dear all,</P> <P>I have Splunk which is installed on a Windows platform. I found it crashes every two days recently. May I know how to find the reason? Thanks</P> <P>Best Regards,<BR /> Peter </P> Wed, 29 Jun 2016 04:02:34 GMT peterchow 2016-06-29T04:02:34Z How to troubleshoot why splunkd keeps crashing every two days on Windows? https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240341#M46701 <P>Dear all,</P> <P>I have Splunk which is installed on a Windows platform. I found it crashes every two days recently. May I know how to find the reason? Thanks</P> <P>Best Regards,<BR /> Peter </P> Wed, 29 Jun 2016 04:02:34 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240341#M46701 peterchow 2016-06-29T04:02:34Z Re: How to troubleshoot why splunkd keeps crashing every two days on Windows? https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240342#M46702 <P>You might need to look at the splunkd log for errors</P> Wed, 29 Jun 2016 06:17:07 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240342#M46702 renjith_nair 2016-06-29T06:17:07Z Re: How to troubleshoot why splunkd keeps crashing every two days on Windows? https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240343#M46703 <P>I find the log but don't know how to read</P> Wed, 29 Jun 2016 06:24:49 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240343#M46703 peterchow 2016-06-29T06:24:49Z Re: How to troubleshoot why splunkd keeps crashing every two days on Windows? https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240344#M46704 <P>Do you mean that you are not able to open or you are not able to understand what's written?</P> Wed, 29 Jun 2016 07:17:17 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240344#M46704 renjith_nair 2016-06-29T07:17:17Z Re: How to troubleshoot why splunkd keeps crashing every two days on Windows? https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240345#M46705 <P>I able to open but unable understand what's written</P> <P>For an example, it said Access violation, cannot read at address [0x000000005368976B7]</P> <P>it is quite difficult to troubleshoot</P> Wed, 29 Jun 2016 08:03:43 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240345#M46705 peterchow 2016-06-29T08:03:43Z Re: How to troubleshoot why splunkd keeps crashing every two days on Windows? https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240346#M46706 <P>Can you post some output from your splunkd.log on that server? I know it's not possible to post the entire log here but some of the messages you are seeing in and around the ERROR might be helpful to better understand what might be going on and what direction to point you in. </P> Wed, 29 Jun 2016 13:13:47 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240346#M46706 ryanoconnor 2016-06-29T13:13:47Z Re: How to troubleshoot why splunkd keeps crashing every two days on Windows? https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240347#M46707 <P>Similar issue to <CODE>Access violation, cannot read at address</CODE> at <A href="https://answers.splunk.com/answers/106568/access-violation-cannot-read-at-address.html">Access Violation, cannot read at address</A></P> <P>They speak there about scheduled searches in a 5.x version ...</P> Wed, 29 Jun 2016 13:48:11 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240347#M46707 ddrillic 2016-06-29T13:48:11Z Re: How to troubleshoot why splunkd keeps crashing every two days on Windows? https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240348#M46708 <P>My splunk version is 6.1.1. Here's some of the log content for your reference.</P> <P>Access violation, cannot read at address [0x00000000xxxxxxx]<BR /> Exception address: [0x00000xxxxxxxxxx]<BR /> Crashing thread: MainTailingThread</P> Thu, 30 Jun 2016 03:55:36 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-troubleshoot-why-splunkd-keeps-crashing-every-two-days-on/m-p/240348#M46708 peterchow 2016-06-30T03:55:36Z