All Apps and Add-ons

Splunk forwarder (version 7.2.2) creating zombie thread.

New Member

We recently installed Splunk forwarder v 7.2.2 the moment it started creating a defunct PID with SYSTEMCLT. I want to know why this keeps on happening. Let us know if we need to change something.

FYI..

Z     5820  7359 systemctl  

-->

4 S root      5820     1  0  80   0 - 96658 ep_pol Apr12 ?        00:04:43 splunkd --under-systemd --systemd-delegate=yes -p 8089 _internal_launch_under_systemd
4 Z root      7359  5820  0  80   0 -     0 do_exi Apr12 ?        00:00:00 [systemctl] 
5 S root      7458  5820  0  80   0 - 21465 ep_pol Apr12 ?        00:00:00 [splunkd pid=5820] splunkd --under-systemd --systemd-delegate=yes -p 8089 _internal_launch_under_systemd [process-runner]
0 Karma

Explorer

Were you able to sort it out? I'm facing the exact same issue

Thanks in advance

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!