Splunk Search

python-O/xoxo/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/root.py” eats much of the swap space

Isaias_Garcia
Path Finder

Hi-

the process "python-O/xoxo/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/root.py" is eating much of our the swap space.Is it okay if I can just kill this process and restart the SPlunk?Does it have dependencies?Please advise.TIA

Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

That's Splunkweb's CherryPy webserver.

If that is a Search Head or otherwise an instance that needs the web UI then it's safe to restart that using $SPLUNK_HOME/bin/splunk restart splunkweb - active users may experience a short interruption of service, but sessions and indexing and whatnot won't be affected.

If that's an Indexer, Heavy Forwarder, or any other instance that doesn't need the web UI then you can just turn it off in web.conf:

[settings]
startwebserver = 0

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

That's Splunkweb's CherryPy webserver.

If that is a Search Head or otherwise an instance that needs the web UI then it's safe to restart that using $SPLUNK_HOME/bin/splunk restart splunkweb - active users may experience a short interruption of service, but sessions and indexing and whatnot won't be affected.

If that's an Indexer, Heavy Forwarder, or any other instance that doesn't need the web UI then you can just turn it off in web.conf:

[settings]
startwebserver = 0

jawaharas
Motivator

@martin_mueller

The client name (/xyz/splunk/bin/splunk restart splunkweb) mentioned the answer is edited.

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with Brett Adams

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative ...

Index This | What can you do to make 55,555 equal 500?

April 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...