topic splunk crash upon receiving too many sockets in Monitoring Splunk https://community.splunk.com/t5/Monitoring-Splunk/splunk-crash-upon-receiving-too-many-sockets/m-p/68282#M777 <P>Hi,<BR /> I'm working on splunk free, I try to run multiple connections by sockets.<BR /> If I try to many sockets (about 350), the splunk server is stuck and I'm getting these errors:<BR /> In web service : errors "Splunkd daemon is not responding"<BR /> In splunkd : warnings "write failed with :104" or "write failed with :32".<BR /> How many connection can splunk handle? and is it suppose to crash if too many connections are opened?<BR /> TIA </P> Wed, 19 Dec 2012 12:19:35 GMT yanivoren 2012-12-19T12:19:35Z splunk crash upon receiving too many sockets https://community.splunk.com/t5/Monitoring-Splunk/splunk-crash-upon-receiving-too-many-sockets/m-p/68282#M777 <P>Hi,<BR /> I'm working on splunk free, I try to run multiple connections by sockets.<BR /> If I try to many sockets (about 350), the splunk server is stuck and I'm getting these errors:<BR /> In web service : errors "Splunkd daemon is not responding"<BR /> In splunkd : warnings "write failed with :104" or "write failed with :32".<BR /> How many connection can splunk handle? and is it suppose to crash if too many connections are opened?<BR /> TIA </P> Wed, 19 Dec 2012 12:19:35 GMT https://community.splunk.com/t5/Monitoring-Splunk/splunk-crash-upon-receiving-too-many-sockets/m-p/68282#M777 yanivoren 2012-12-19T12:19:35Z Re: splunk crash upon receiving too many sockets https://community.splunk.com/t5/Monitoring-Splunk/splunk-crash-upon-receiving-too-many-sockets/m-p/68283#M778 <P>A defect in Windows causes sockets to be leaked. This can be fixed by applying a patch; see <A href="http://support.microsoft.com/kb/2577795">the Microsoft KB</A>.</P> Wed, 16 Jan 2013 21:49:23 GMT https://community.splunk.com/t5/Monitoring-Splunk/splunk-crash-upon-receiving-too-many-sockets/m-p/68283#M778 LukeMurphey 2013-01-16T21:49:23Z Re: splunk crash upon receiving too many sockets https://community.splunk.com/t5/Monitoring-Splunk/splunk-crash-upon-receiving-too-many-sockets/m-p/68284#M779 <P>Note that increasing the number of ephemeral ports per <A href="http://support.microsoft.com/kb/q196271">http://support.microsoft.com/kb/q196271</A> only delays the recurrence of the issue.</P> Wed, 30 Jan 2013 17:54:52 GMT https://community.splunk.com/t5/Monitoring-Splunk/splunk-crash-upon-receiving-too-many-sockets/m-p/68284#M779 LukeMurphey 2013-01-30T17:54:52Z