Monitoring Splunk

The Splunkd Services are not working after starting/restarting the services and it is getting stopped, tried several tim

Amolsbhalerao
New Member

Hello 

 

The Splunkd Services are not working after starting/restarting the services and it is getting stopped, I have tried several times. So, could you please help me to sort it out from this issue. Thanks in advance.

Labels (1)
0 Karma

azteksites
Explorer

@Amolsbhalerao 

You may have a stale splunk.pid file that is not being cleared on startup. This can prevent the splunkd process from starting. If this is the case, you can make a copy of the splunk.pid file in the /splunkforwarder/var/run/splunk directory and replace it with the original.

Run ps -ef | grep splunk command to verify the process is running.

0 Karma

isoutamo
SplunkTrust
SplunkTrust
Hi
what you found from SPLUNK_HOME/var/log/splunk/splunkd.log file? There should be mention why it didn't start.
r. Ismo
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...