Installation

Why one server has splunk service failling and splunk-winevtlog.exe is not starting?

meetbikash
Engager

One server has splunk service failling and it seems splunk-winevtlog.exe is not started.

there of two services are up and one is alwasys down and not started.

reinstalled agent but still didnot help.

 

SplunkForwarder Service Windows Service Monitor Up
Up splunkd.exe Process Monitor - Windows Up
Down splunk-winevtlog.exe Process Monitor - Windows Down

 

Labels (4)
Tags (1)
0 Karma

gcusello
Legend

Hi @meetbikash,

splunk-winevtlog.exe is the connector to read wineventlog data.

Which operative system are you using and which splunk version?

have you an antivirus, because it seems that there's a problem on a single process  to start.

Eventually open a Case to Splunk Support.

Ciao.

Giuseppe

0 Karma

meetbikash
Engager

Thanks for the Reply,

we are on 2019 and Splunk Universal forwarder is on 8.2.4

0 Karma

gcusello
Legend

Hi @meetbikash,

this means that there isn't any compatibility problem.

Check if there's an antivirus or some other protection system that requiresi a definition of the acceptable processes.

Then which user are you using to run splunk?

Anyway, open a Case to Splunk Support.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...