×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
Splunker8
Explorer
Member since: ‎04-19-2023
‎07-12-2023
Community Statistics
Posts 4
Solutions 0
Karma Given 3
Karma Received 0
Member Since ‎04-19-2023
View All

Re: Splunk universal forwarder crashing - Crashing...

by in Getting Data In
‎07-12-2023 04:39 AM
‎07-12-2023 04:39 AM
1. UF 9.0.4   OS: Linux Arch: x86-64 2.  No upgrade done 3. No changes. Its a new installation. 4. crashing on only one UF ... View more

Splunk universal forwarder crashing - Crashing thr...

by in Getting Data In
‎07-11-2023 03:38 PM
‎07-11-2023 03:38 PM
Splunk universal forwarder crashes here are crash logs: [build de405f4a7979] 2023-07-10 17:31:30 Received fatal signal 11 (Segmentation fault) on PID 3013854. Cause: No memory mapped at address [0x0000000000000080]. Crashing thread: parsing Registers: RIP: [0x00007FBC41EDEA74] __pthread_mutex_lock + 4 (libpthread.so.0 + 0xAA74) RDI: [0x0000000000000070] RSI: [0x00007FBC3E21A0B0] RBP: [0x00007FBC2FDFD980] RSP: [0x00007FBC2FDFD8C8] RAX: [0x0000558B2F9877E0] RBX: [0x0000000000000000] RCX: [0x0000000000000000] RDX: [0x00007FBC2FDFD8F8] R8: [0x0000000000000000] R9: [0x00007FBC41200080] R10: [0x00000000000000A3] R11: [0x0000000000000000] R12: [0x0000000000000001] R13: [0x0000000000000070] R14: [0x00007FBC2FDFD8F0] R15: [0x0000558B2F9877D0] EFL: [0x0000000000010202] TRAPNO: [0x000000000000000E] ERR: [0x0000000000000004] CSGSFS: [0x002B000000000033] OLDMASK: [0x0000000000000000] OS: Linux Arch: x86-64 Backtrace (PIC build): [0x00007FBC41EDEA74] __pthread_mutex_lock + 4 (libpthread.so.0 + 0xAA74) [0x0000558B2CE030D9] _ZN16PthreadMutexImpl4lockEv + 9 (splunkd + 0x2DD20D9) [0x0000558B2CD3ED27] _ZN9EventLoop20internal_runInThreadEP13InThreadActorb + 103 (splunkd + 0x2D0DD27) [0x0000558B2CB7B19A] _ZN11Distributed11EloopRunner3runEPNS_15EloopRunnerTaskE + 170 (splunkd + 0x2B4A19A) [0x0000558B2C02A6A6] _ZN18TcpOutputProcessor7executeER15CowPipelineData + 230 (splunkd + 0x1FF96A6) [0x0000558B2C7B1B29] _ZN9Processor12executeMultiER18PipelineDataVectorPS0_ + 73 (splunkd + 0x2780B29) [0x0000558B2BDA03A2] _ZN8Pipeline4mainEv + 1074 (splunkd + 0x1D6F3A2) [0x0000558B2CE02DAD] _ZN6Thread37_callMainAndDiscardTerminateExceptionEv + 13 (splunkd + 0x2DD1DAD) [0x0000558B2CE03CA2] _ZN6Thread8callMainEPv + 178 (splunkd + 0x2DD2CA2) [0x00007FBC41EDC1CF] ? (libpthread.so.0 + 0x81CF) [0x00007FBC4146ADD3] clone + 67 (libc.so.6 + 0x39DD3) ... View more
Labels

Splunk Forwarder unable to read inputs.conf file

by in Getting Data In
‎05-29-2023 05:43 AM
‎05-29-2023 05:43 AM
05-29-2023 06:00:46.836 +0000 WARN ConfigWatcher [249660 SplunkConfigChangeWatcherThread] - Failed to read file to checksum in init(), path=/opt/splunkforwarder/etc/apps/app1/local/inputs.conf 05-29-2023 06:00:46.836 +0000 ERROR ConfigWatcher [249660 SplunkConfigChangeWatcherThread] - initialization failed for path=/opt/splunkforwarder/etc/apps/app1/local/inputs.conf     Splunk Forwarder unable to read inputs.conf file. Seeing above 2 issues in splunkd.log ... View more
Labels

Index not shown in "Enable Summary Index" dropdown

by in Splunk Enterprise
‎04-19-2023 10:26 AM
‎04-19-2023 10:26 AM
I've created a summary index and user with admin role can see it when selecting "Enable Summary Index" option but the but the user with power role cannot see that index at all.  ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎07-12-2023 08:02 AM
Karma given to
View All