Why does my splunk crash after starting it?

[rajyah]

It's been going on for days now and I don't know where to investigate.

It says in the /var/log/messages that it cannot allocate memory.

The remedy I used for this is to reboot the instance, but then as soon as the splunk starts it crashes again.. I mean the whole system hangs.

Please help. I've already disabled the THP and adjusted the ulimits.

[rajyah]

Actually, the title should be "Why does my instance crash/hangs after starting splunk?"

[MuS]

Well, It says in the /var/log/messages that it cannot allocate memory. there you have the reason. Now you need to find out if you either can add more memory or limit the other application so they don't use all the memory.

cheers, MuS