Splunk Dev

many splunkd.exe btool server list processes running on windows server

las
Builder

Hi.

I have a small sandbox server, where I installed Splunk 6.5.2, and a test installation of ITSI (4 vCPU).
When I look at the processes I see many, not counted, "bin\splunkd.exe btool server list", and similarly bin\btool server list" processes, I'm taking hundreds of processes.

This causes high CPU and memory usage.

Can this behaviour be a result of the low CPU count, or do any of you have seen something similar?

Kind regards

0 Karma

las
Builder

I raised an issue with Splunk Support, and after some investigation we found that it was a corrupt DLL in windows that preventet Splunk from starting some processes. I am in the process of getting a new server, and move the installation to that.

0 Karma

woodcock
Esteemed Legend

Wow, hard-core! Be sure to click Accept.

0 Karma

FarrellJ
New Member

I am see this same activity would like some feed back on how to tract down what is spinning the btool to run

0 Karma

woodcock
Esteemed Legend

Have you installed a modular input app that aggregates btool output that would keep running the command?

0 Karma

las
Builder

I have raised the question with support, and they are working on it.

0 Karma

woodcock
Esteemed Legend

Be sure to post the conclusion here!

0 Karma

las
Builder

Not that I know of, ITSI might have done it, but I fail to see the reason why.
There are only two apps installed ITSI that spawns some subapps, and Machine learning Toolkit.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...