Splunk Enterprise

Splunk 8.2.1 on Windows Crashes every night

tam82
Explorer

every night my Server Crashes saying out of memory error however I have more than enough memory.

In event logs get a : Unable to allocate dynamic memory buffer ,and Faulting application name: splunkd 

faulting module name: Ucrtbase.dll

 

Systems log has a low memory condition  looks like Splunk has a memory leak so how do i find out what is causing it ?

 

 

 

Labels (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Do you have a scheduled search that runs overnight and consumes a lot of memory?

How much is "more than enough memory"?

Once you've ruled out a rogue search and confirm the system meets the recommended hardware specs, consider opening a case with Splunk Support.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...