Splunk Enterprise

Splunk SH2 splunkd not respond

New Member


I'm Kisun Han and using splunk enterprise with three Search Heads.

splunkd service in SH2 out of three SH cluster was down at May 28th 09:02~09:32

we want to find why SH2 was down.

please see logs below and hope the cause will be found.

if you need additional info please let me know.

Thank you


Labels (1)
0 Karma


You should open a ticket with Splunk Support and send them the core file from SH2.

If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Data Preparation Made Easy: SPL2 for Edge Processor

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Tips & Tricks When Using Ingest Actions

Tune in to learn about:Large scale architecture when using Ingest ActionsRegEx performance considerations ...