topic Re: Splunk Forwarder Service continually stops in Getting Data In

Splunk Forwarder Service continually stops

gobofo — Mon, 01 Aug 2011 16:31:22 GMT

We have 2 Windows Servers (2008 and 2003), the Universal Splunk forwarder continually stops, every few hours.

Where should I be looking to see what the cause is.
Any known fixes or issues?

Thanks

Re: Splunk Forwarder Service continually stops

jbsplunk — Mon, 01 Aug 2011 16:51:14 GMT

What version of the UF? Are there any messages in $SPLUNK_HOME/var/log/splunk/splunkd.log around the time of the failure? What about in the windows event logs?

Re: Splunk Forwarder Service continually stops

mzorzi — Tue, 02 Aug 2011 08:44:57 GMT

If that happens periodically I would check the Windows Event Logs

Re: Splunk Forwarder Service continually stops

japrivacy — Tue, 07 Apr 2015 19:28:35 GMT

checking in the windows event application event logs, the splunk modular powershell.exe would die.

common logging error

but also my server has a local.meta path issue.