Deployment Architecture

Splunk service on search heads going inactive after rolling restart

agentsofshield
Path Finder

I made a splunk.service file inside /etc/systemd/system so I could manage splunk like a service.
Here is what i wrote inside it:
`[Unit]
Description=Splunk

[Service]
Type=forking
ExecStart=/opt/splunk/bin/splunk start
ExecStop=/opt/splunk/bin/splunk stop
Restart=on-failure`

After I made the service, every time I did a rolling restart on the search heads the service became inactive in all of them.
Is the Restart=on-failure interfering with the restart? what can I do to fix it?

Thanks.

1 Solution

agentsofshield
Path Finder

The problem was indeed with Restart=on-failure it should be Restart=always and then it works like a charm!

View solution in original post

0 Karma

agentsofshield
Path Finder

The problem was indeed with Restart=on-failure it should be Restart=always and then it works like a charm!

View solution in original post

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!