Splunk Enterprise

Splunk 8.2.1 on Windows Crashes every night

tam82
Explorer

every night my Server Crashes saying out of memory error however I have more than enough memory.

In event logs get a : Unable to allocate dynamic memory buffer ,and Faulting application name: splunkd 

faulting module name: Ucrtbase.dll

 

Systems log has a low memory condition  looks like Splunk has a memory leak so how do i find out what is causing it ?

 

 

 

Labels (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Do you have a scheduled search that runs overnight and consumes a lot of memory?

How much is "more than enough memory"?

Once you've ruled out a rogue search and confirm the system meets the recommended hardware specs, consider opening a case with Splunk Support.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...