Splunk forwarder (version 7.2.2) creating zombie thread.

[sreechallagundl]

We recently installed Splunk forwarder v 7.2.2 the moment it started creating a defunct PID with SYSTEMCLT. I want to know why this keeps on happening. Let us know if we need to change something.

FYI..

Z     5820  7359 systemctl  

-->

4 S root      5820     1  0  80   0 - 96658 ep_pol Apr12 ?        00:04:43 splunkd --under-systemd --systemd-delegate=yes -p 8089 _internal_launch_under_systemd
4 Z root      7359  5820  0  80   0 -     0 do_exi Apr12 ?        00:00:00 [systemctl] 
5 S root      7458  5820  0  80   0 - 21465 ep_pol Apr12 ?        00:00:00 [splunkd pid=5820] splunkd --under-systemd --systemd-delegate=yes -p 8089 _internal_launch_under_systemd [process-runner]

[ptcrusher]

Were you able to sort it out? I'm facing the exact same issue

Thanks in advance