Splunk Search

python-O/xoxo/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/root.py” eats much of the swap space

Isaias_Garcia
Path Finder

Hi-

the process "python-O/xoxo/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/root.py" is eating much of our the swap space.Is it okay if I can just kill this process and restart the SPlunk?Does it have dependencies?Please advise.TIA

Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

That's Splunkweb's CherryPy webserver.

If that is a Search Head or otherwise an instance that needs the web UI then it's safe to restart that using $SPLUNK_HOME/bin/splunk restart splunkweb - active users may experience a short interruption of service, but sessions and indexing and whatnot won't be affected.

If that's an Indexer, Heavy Forwarder, or any other instance that doesn't need the web UI then you can just turn it off in web.conf:

[settings]
startwebserver = 0

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

That's Splunkweb's CherryPy webserver.

If that is a Search Head or otherwise an instance that needs the web UI then it's safe to restart that using $SPLUNK_HOME/bin/splunk restart splunkweb - active users may experience a short interruption of service, but sessions and indexing and whatnot won't be affected.

If that's an Indexer, Heavy Forwarder, or any other instance that doesn't need the web UI then you can just turn it off in web.conf:

[settings]
startwebserver = 0

jawaharas
Motivator

@martin_mueller

The client name (/xyz/splunk/bin/splunk restart splunkweb) mentioned the answer is edited.

0 Karma
Get Updates on the Splunk Community!

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...

The Great Resilience Quest: 10th Leaderboard Update

The tenth leaderboard update (11.23-12.05) for The Great Resilience Quest is out >> As our brave ...