Monitoring Splunk

After recently upgrading (6.6->7.0.8), why is splunkd_server now consuming a lot of memory?


We upgraded on 2/11 from 6.6 to 7.0.8, and are now seeing daily occurrences of splunkd_server taking up to 9g of avg memory for extended periods of time.

I can't find much online about what splunkd_server is, what processes run under it, or how to figure out why it's consuming significant memory. Any help is appreciated.


0 Karma


There were some memory related bugs in the 7.0.x releases, but I cant find anything specific on this page:

If I were you, I would continue upgrading to the latest version 7.2.4

0 Karma
Get Updates on the Splunk Community!

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...