Monitoring Splunk

splunk process compulsion stop

kobayashikenji
Explorer

Hi

I want to kill the process of Splunk.
May be performed by specifying the "PID" with this command ?

kill -9 <PID>

There is no problem?

Tags (2)
0 Karma

miteshvohra
Contributor

You can kill all processes on 'splunkd' with

kill `ps -ef | grep splunkd | egrep -v grep | awk '{print $2}'`

But, just like @esix_splunk mentioned, make sure you restart Splunk with the correct user and that, using Splunk's native commands to Start/Stop/Restart the service is much cleaner.

Mitesh.

kobayashikenji
Explorer

Thank you very much.
I wanted absolutely compulsion stop.
Normally, you run the answer @ esix_splunk.

kenji.

0 Karma

miteshvohra
Contributor

@kobayashikenji I am bit curious to know about the purpose of force-stopping Splunk. 🙂

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

This works, make sure when you restart Splunk, you are using the correct user.

But why not do '/opt/splunk/splunk stop' or 'service splunk stop'

0 Karma

kobayashikenji
Explorer

If not stop at Splunk command,
Because I want to compulsion stop.
Normally, will use the "splunk stop".
Answer Thank you very much.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...