It occurs 3-4 hours after starting splunk.  These are the logs found in splunk/var/log/splunk/mongod.log I CONTROL [signalProcessingThread] got signal 15 (Terminated), will terminate after current cmd ends I NETWORK [signalProcessingThread] shutdown: going to close listening sockets... I REPL [signalProcessingThread] shutting down replication subsystems I REPL [signalProcessingThread] Stopping replication reporter thread I REPL [signalProcessingThread] Stopping replication fetcher thread I REPL [signalProcessingThread] Stopping replication applier thread     ... View more