I made a splunk.service file inside /etc/systemd/system so I could manage splunk like a service.
Here is what i wrote inside it:
After I made the service, every time I did a rolling restart on the search heads the service became inactive in all of them.
Is the Restart=on-failure interfering with the restart? what can I do to fix it?
The problem was indeed with Restart=on-failure it should be Restart=always and then it works like a charm!
View solution in original post