Deployment Architecture

Splunk service on search heads going inactive after rolling restart

agentsofshield
Path Finder

I made a splunk.service file inside /etc/systemd/system so I could manage splunk like a service.
Here is what i wrote inside it:
`[Unit]
Description=Splunk

[Service]
Type=forking
ExecStart=/opt/splunk/bin/splunk start
ExecStop=/opt/splunk/bin/splunk stop
Restart=on-failure`

After I made the service, every time I did a rolling restart on the search heads the service became inactive in all of them.
Is the Restart=on-failure interfering with the restart? what can I do to fix it?

Thanks.

1 Solution

agentsofshield
Path Finder

The problem was indeed with Restart=on-failure it should be Restart=always and then it works like a charm!

View solution in original post

0 Karma

agentsofshield
Path Finder

The problem was indeed with Restart=on-failure it should be Restart=always and then it works like a charm!

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...