Splunk Search

Identify a hanging GUI (process)

j_star
New Member

Problem
I have a gui running as javaw.exe and I want to identify when this gui is "Not Responding"

Tools
I am using the following command to identify it:
tasklist /v | findstr javaw.exe

What is working:
- Running this command from command prompt
- Adding this command to a .bat and running that from command prompt

What is not working:
- Using input.conf to run the script (it executes and indexes the result, but the "Status" is "Unknown" instead of "Running")

What I have tried:
- I have looked at permissions and my user and "System" all have adequate permissions (For the .bat, it's parent folders)
- I have tried adjusting the SplunkForwarder Service to run as my user instead of System
-- It is noteworthy, after running the service as my user, if I run a tasklist command and look up splunk, it still doesn't know what user is running the service

Has anyone run into this? Anyone have any advice on how to fix it? Is there a better way to look for a hanging window/process with Splunk?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...