Hi All:
I am facing an issue where the Splunk daemon after a recycle generates a lock file on Search Head. I am required to keep on deleting the pid lock file under $SPLUNK_Home\var directory. We have Search Head on windows platform. Is there a clean way of restart or how can I permanently get rid of these pid config locks.
This is a known bug in Version 6.1.2 which has been alleviated by migrating to version 6.1.4.
This is a known bug in Version 6.1.2 which has been alleviated by migrating to version 6.1.4.
What version are you running?
question are you running splunk as local system or as a service account?