Upgraded to 4.3 and now searches fail | many "SbrkSysAllocator failed" errors

Path Finder

All searches return somethings like this

"Timed out waiting for status to become available on job=1328653078.37"

I even created a new test index that contains just one event pulled in from a local file, and got a similar warning.

After running a search splunkd.log showed

02-07-2012 17:47:26.503 -0500 WARN ProcessDispatchedSearch - PROCESS_SEARCH src/] SbrkSysAllocator failed.

Tags (2)

Path Finder

Not related to memory. We rolled backed to the previous version 4.2.5 and plan to do a secondary install and maybe import some of our old indexes.

0 Karma

Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...