- Splunk Answers
- :
- Using Splunk
- :
- Splunk Dev
- :
- many splunkd.exe btool server list processes runni...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
many splunkd.exe btool server list processes running on windows server
Hi.
I have a small sandbox server, where I installed Splunk 6.5.2, and a test installation of ITSI (4 vCPU).
When I look at the processes I see many, not counted, "bin\splunkd.exe btool server list", and similarly bin\btool server list" processes, I'm taking hundreds of processes.
This causes high CPU and memory usage.
Can this behaviour be a result of the low CPU count, or do any of you have seen something similar?
Kind regards
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I raised an issue with Splunk Support, and after some investigation we found that it was a corrupt DLL in windows that preventet Splunk from starting some processes. I am in the process of getting a new server, and move the installation to that.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Wow, hard-core! Be sure to click Accept.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I am see this same activity would like some feed back on how to tract down what is spinning the btool to run
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Have you installed a modular input app that aggregates btool output that would keep running the command?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have raised the question with support, and they are working on it.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Be sure to post the conclusion here!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Not that I know of, ITSI might have done it, but I fail to see the reason why.
There are only two apps installed ITSI that spawns some subapps, and Machine learning Toolkit.
Introducing Splunk Enterprise 9.2
Adoption of RUM and APM at Splunk
Routing logs with Splunk OTel Collector for Kubernetes
