Monitoring Splunk

The Splunkd Services are not working after starting/restarting the services and it is getting stopped, tried several tim

Amolsbhalerao
New Member

Hello 

 

The Splunkd Services are not working after starting/restarting the services and it is getting stopped, I have tried several times. So, could you please help me to sort it out from this issue. Thanks in advance.

Labels (1)
0 Karma

azteksites
Explorer

@Amolsbhalerao 

You may have a stale splunk.pid file that is not being cleared on startup. This can prevent the splunkd process from starting. If this is the case, you can make a copy of the splunk.pid file in the /splunkforwarder/var/run/splunk directory and replace it with the original.

Run ps -ef | grep splunk command to verify the process is running.

0 Karma

isoutamo
SplunkTrust
SplunkTrust
Hi
what you found from SPLUNK_HOME/var/log/splunk/splunkd.log file? There should be mention why it didn't start.
r. Ismo
0 Karma
Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...