Splunk Dev

many splunkd.exe btool server list processes running on windows server

las
Contributor

Hi.

I have a small sandbox server, where I installed Splunk 6.5.2, and a test installation of ITSI (4 vCPU).
When I look at the processes I see many, not counted, "bin\splunkd.exe btool server list", and similarly bin\btool server list" processes, I'm taking hundreds of processes.

This causes high CPU and memory usage.

Can this behaviour be a result of the low CPU count, or do any of you have seen something similar?

Kind regards

0 Karma

las
Contributor

I raised an issue with Splunk Support, and after some investigation we found that it was a corrupt DLL in windows that preventet Splunk from starting some processes. I am in the process of getting a new server, and move the installation to that.

0 Karma

woodcock
Esteemed Legend

Wow, hard-core! Be sure to click Accept.

0 Karma

FarrellJ
New Member

I am see this same activity would like some feed back on how to tract down what is spinning the btool to run

0 Karma

woodcock
Esteemed Legend

Have you installed a modular input app that aggregates btool output that would keep running the command?

0 Karma

las
Contributor

I have raised the question with support, and they are working on it.

0 Karma

woodcock
Esteemed Legend

Be sure to post the conclusion here!

0 Karma

las
Contributor

Not that I know of, ITSI might have done it, but I fail to see the reason why.
There are only two apps installed ITSI that spawns some subapps, and Machine learning Toolkit.

0 Karma
Get Updates on the Splunk Community!

Demo Day: Strengthen Your SOC with Splunk Enterprise Security 8.1

Today’s threat landscape is more complex than ever. Security operation centers (SOCs) are overwhelmed with ...

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...