All Apps and Add-ons

Splunk Add-on for Microsoft Windows: Why is the application named splunk-powershell.exe faulting?

mlevsh
Builder

We have a Splunk universal forwarders installed on our Windows servers.

Lately, our Windows admins noticed a lot of error events on our Windows servers:

Faulting application name: splunk-powershel.exe, version 0.0.0.0, time stamp: 0x5a6a3f56
Faulting module name: KERNELBASE.dll , version 6.3.9600.18895 , time stamp: 0x5a4b1b67
Exception code:)xc0000142
...
Faulting application path: C:\Program Files\SPlunkUniversalForwarder\bin\splunk-powershell.exe
Faulting module path: KERNELBASE.dll
...

It seems that it caused the amount of data we received via the Splunk add-on for Windows from the servers with errors above to decrease significantly.

Any advice on what might cause it and how to resolve it?

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...