Installation

Why one server has splunk service failling and splunk-winevtlog.exe is not starting?

meetbikash
Engager

One server has splunk service failling and it seems splunk-winevtlog.exe is not started.

there of two services are up and one is alwasys down and not started.

reinstalled agent but still didnot help.

 

SplunkForwarder Service Windows Service Monitor Up
Up splunkd.exe Process Monitor - Windows Up
Down splunk-winevtlog.exe Process Monitor - Windows Down

 

Labels (4)
Tags (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @meetbikash,

splunk-winevtlog.exe is the connector to read wineventlog data.

Which operative system are you using and which splunk version?

have you an antivirus, because it seems that there's a problem on a single process  to start.

Eventually open a Case to Splunk Support.

Ciao.

Giuseppe

0 Karma

meetbikash
Engager

Thanks for the Reply,

we are on 2019 and Splunk Universal forwarder is on 8.2.4

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @meetbikash,

this means that there isn't any compatibility problem.

Check if there's an antivirus or some other protection system that requiresi a definition of the acceptable processes.

Then which user are you using to run splunk?

Anyway, open a Case to Splunk Support.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...