Getting Data In

Splunk Forwarder Service continually stops

New Member

We have 2 Windows Servers (2008 and 2003), the Universal Splunk forwarder continually stops, every few hours.

  1. Where should I be looking to see what the cause is.

  2. Any known fixes or issues?

Thanks

0 Karma

New Member

checking in the windows event application event logs, the splunk modular powershell.exe would die.

common logging error

but also my server has a local.meta path issue.

0 Karma

Splunk Employee
Splunk Employee

If that happens periodically I would check the Windows Event Logs

0 Karma

Splunk Employee
Splunk Employee

What version of the UF? Are there any messages in $SPLUNK_HOME/var/log/splunk/splunkd.log around the time of the failure? What about in the windows event logs?

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!