My guess would be that you were using init.d on the old server but (maybe without even knowing/deciding) switched to systemd on the new server. The new systemd unit file is a disaster and I had a client lose half a year chasing performance problems because of EXACTLY this. I would switch back to init.d and be happy. See here: https://community.splunk.com/t5/Monitoring-Splunk/Version-7-2-6-how-to-verify-systemctl-restart-stop-splunkd-is/m-p/423109
... View more