Splunk Dev

many splunkd.exe btool server list processes running on windows server

las
Contributor

Hi.

I have a small sandbox server, where I installed Splunk 6.5.2, and a test installation of ITSI (4 vCPU).
When I look at the processes I see many, not counted, "bin\splunkd.exe btool server list", and similarly bin\btool server list" processes, I'm taking hundreds of processes.

This causes high CPU and memory usage.

Can this behaviour be a result of the low CPU count, or do any of you have seen something similar?

Kind regards

0 Karma

las
Contributor

I raised an issue with Splunk Support, and after some investigation we found that it was a corrupt DLL in windows that preventet Splunk from starting some processes. I am in the process of getting a new server, and move the installation to that.

0 Karma

woodcock
Esteemed Legend

Wow, hard-core! Be sure to click Accept.

0 Karma

FarrellJ
New Member

I am see this same activity would like some feed back on how to tract down what is spinning the btool to run

0 Karma

woodcock
Esteemed Legend

Have you installed a modular input app that aggregates btool output that would keep running the command?

0 Karma

las
Contributor

I have raised the question with support, and they are working on it.

0 Karma

woodcock
Esteemed Legend

Be sure to post the conclusion here!

0 Karma

las
Contributor

Not that I know of, ITSI might have done it, but I fail to see the reason why.
There are only two apps installed ITSI that spawns some subapps, and Machine learning Toolkit.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...