Getting Data In

Failures to restart the UF in Windows

TouteSplunk
Engager

Hi! What are some common causes of failures to restart the Splunk Universal Forwarder in windows?

Thank you!

Labels (1)
0 Karma

inventsekar
SplunkTrust
SplunkTrust

Hi @TouteSplunk .. As @gcusello suggested, you should provide us more details. 

to add one thing to the above list....

are you trying to push apps/config files from DS to a windows UF and the restart splunkd option is not working as you are expecting ah.. 

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !

gcusello
SplunkTrust
SplunkTrust

Hi @TouteSplunk,

could you better describe your issue?

what UF version?

on what windows?

how much RAM have you on yor UF?

What was the message you received?

In my experience, only one time an UF failedto start on Windows, there was not sufficient RAM.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...