We have a Splunk universal forwarders installed on our Windows servers.
Lately, our Windows admins noticed a lot of error events on our Windows servers:
Faulting application name: splunk-powershel.exe, version 0.0.0.0, time stamp: 0x5a6a3f56
Faulting module name: KERNELBASE.dll , version 6.3.9600.18895 , time stamp: 0x5a4b1b67
Exception code:)xc0000142
...
Faulting application path: C:\Program Files\SPlunkUniversalForwarder\bin\splunk-powershell.exe
Faulting module path: KERNELBASE.dll
...
It seems that it caused the amount of data we received via the Splunk add-on for Windows from the servers with errors above to decrease significantly.
Any advice on what might cause it and how to resolve it?
