Monitoring Splunk

Splunk issue - bad allocation error

uagraw01
Motivator

Hello Splunkers!!

I am getting "Bad allocation" error on all the Splunk dashboard panel. Please help me to identify the potential root cause.

uagraw01_0-1728641318047.png

 

Labels (1)
Tags (1)
0 Karma

inventsekar
SplunkTrust
SplunkTrust

Hi @uagraw01 Looks like this issue is about memory. Could you pls check memory usage on this Splunk instance, thanks. 

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

uagraw01
Motivator

@inventsekar I have updated the limits.conf under system/local and it does not impact anything. Issue is still  persist.

[default]
max_mem_usage_mb = 500

[searchresults]
maxresultrows = 86400
0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...