Hello, @kundeng Did you resolve this probleam? We have the same symptoms in our environment at version 8.1.3. Thanks ... View more

We had exactly the same problem and it was started after upgrade to version 7.0.2. After opening a case in Splunk, they instructed us to upgrade to version 7.0.3 or higher because it's a bug that was fixed in "SPL-148969, SPL-148600 Indexer may crash during hot bucket rolling following a streaming failure". Hope this helps you. ... View more