Getting Data In

Why did our Splunk forwarder die getting "ERROR ProcessRunner - helper process seems to have died (child killed by signal 15: Terminated)"?

itmonitoring
Explorer

FATAL ProcessRunner - Unexpected EOF from process runner child!
ild killed by signal 1510-24-2014 06:42:23.633 -0600 ERROR ProcessRunner - helper process seems to have died (child killed by signal 15: Terminated)

yaseen417
New Member

There's a possibility that, instead of using splunk restart/stop/start, splunkd is used which is a daemon itself.

0 Karma

lguinn2
Legend

Signal 15 is sent to a process by the Linux kill command. Is it possible that someone killed the process?

0 Karma

itmonitoring
Explorer

As per logs nobody kills it manually still looking for the reason...

0 Karma

ben_leung
Builder

This also occurred on the indexer level but instead with a signal 9 in splunkd.log for version 6.0.5, is this known issue?

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...