When I enable Universal Forwarder in core Splunk 4.2, after restart, it crashed.
For some reason, Splunk 4.2 shipped with Universal Forwarder app. This app should not be included with the core Splunk 4.2.
Please uninstall 4.2 and install it again. If you want to have Universal Forwarder, please download it and install it separately. This is an Known Issue in 4.2. SPL-39200
View solution in original post