https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Indexer-server-crashes-and-keep-going-down/m-p/625478#M9272 <P>Hello, I have a server indexer that crashes from time to time, what is the best way to investigate what caused the problem?</P><P>How can I see the logs through index=_internal and splunkd.log?</P> Thu, 29 Dec 2022 14:49:50 GMT Zarack 2022-12-29T14:49:50Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Indexer-server-crashes-and-keep-going-down/m-p/625478#M9272 <P>Hello, I have a server indexer that crashes from time to time, what is the best way to investigate what caused the problem?</P><P>How can I see the logs through index=_internal and splunkd.log?</P> Thu, 29 Dec 2022 14:49:50 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Indexer-server-crashes-and-keep-going-down/m-p/625478#M9272 Zarack 2022-12-29T14:49:50Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Indexer-server-crashes-and-keep-going-down/m-p/625479#M9273 <P>&nbsp;there is crash logs on the server in $SPLUNK_HOME/var/log/splunk/crash*.log it gets ingested under sourcetype=splunkd_crash_log</P> Thu, 29 Dec 2022 14:53:44 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Indexer-server-crashes-and-keep-going-down/m-p/625479#M9273 SonOfBuzi 2022-12-29T14:53:44Z