https://community.splunk.com/t5/Monitoring-Splunk/Splunk-server-crush/m-p/504919#M4240 <P>We had our Splunk server stopping by itself two days in a row.</P><P>I am trying to find the reason but I cannot find anything related in /opt/splunk/var/log/splunk.</P><P>Could someone please advise where I should be looking for the related logs?</P> Thu, 18 Jun 2020 08:44:57 GMT sbarinov 2020-06-18T08:44:57Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-server-crush/m-p/504919#M4240 <P>We had our Splunk server stopping by itself two days in a row.</P><P>I am trying to find the reason but I cannot find anything related in /opt/splunk/var/log/splunk.</P><P>Could someone please advise where I should be looking for the related logs?</P> Thu, 18 Jun 2020 08:44:57 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-server-crush/m-p/504919#M4240 sbarinov 2020-06-18T08:44:57Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-server-crush/m-p/504921#M4241 <P>As it was found, there was a kernel out of memory error.</P><P>We are running&nbsp;Version:7.2.5 on 12GB RAM.</P><P>I am wondering what we can do about that.</P><P>I will try to limit the amount of records in alert searches since we have them running all the time.</P> Mon, 22 Jun 2020 08:24:04 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-server-crush/m-p/504921#M4241 sbarinov 2020-06-22T08:24:04Z