Getting Data In

On Windows, Forwarder crash - splunk_wmi.exe

New Member


I have installed the Forwarder on windows, and Forwarder works well for a period of time.
But, forwarder crashed suddenly with error log:
ERROR ExecProcessor - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-wmi.exe"" Clean shutdown completed.

What's the reason for this crash? How to avoid it happen again? Any guidance or suggestions will be highly appreciated! Thanks!

0 Karma


Hi @wangzhaoyu,
I had a similar problem in several projects.
One of them, it was a memory problem that I solved widening RAM.
Other times it was a problem on an old Universal Forwarder that Splunk Support solved upgrading UF.
If it continues, open a ticket to Splunk Support.


0 Karma

New Member

Hi @gcusello ,

thank you sooo much
we will check the memory and UF version 🙂

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!


Or Learn More in Our Blog >>