Splunk Enterprise

Splunk 8.2.1 on Windows Crashes every night

tam82
Explorer

every night my Server Crashes saying out of memory error however I have more than enough memory.

In event logs get a : Unable to allocate dynamic memory buffer ,and Faulting application name: splunkd 

faulting module name: Ucrtbase.dll

 

Systems log has a low memory condition  looks like Splunk has a memory leak so how do i find out what is causing it ?

 

 

 

Labels (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Do you have a scheduled search that runs overnight and consumes a lot of memory?

How much is "more than enough memory"?

Once you've ruled out a rogue search and confirm the system meets the recommended hardware specs, consider opening a case with Splunk Support.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...