Getting Data In

Why did our Splunk forwarder die getting "ERROR ProcessRunner - helper process seems to have died (child killed by signal 15: Terminated)"?

itmonitoring
Explorer

FATAL ProcessRunner - Unexpected EOF from process runner child!
ild killed by signal 1510-24-2014 06:42:23.633 -0600 ERROR ProcessRunner - helper process seems to have died (child killed by signal 15: Terminated)

yaseen417
New Member

There's a possibility that, instead of using splunk restart/stop/start, splunkd is used which is a daemon itself.

0 Karma

lguinn2
Legend

Signal 15 is sent to a process by the Linux kill command. Is it possible that someone killed the process?

0 Karma

itmonitoring
Explorer

As per logs nobody kills it manually still looking for the reason...

0 Karma

ben_leung
Builder

This also occurred on the indexer level but instead with a signal 9 in splunkd.log for version 6.0.5, is this known issue?

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...