It occurs 3-4 hours after starting splunk.
These are the logs found in splunk/var/log/splunk/mongod.log
I CONTROL [signalProcessingThread] got signal 15 (Terminated), will terminate after current cmd ends
I NETWORK [signalProcessingThread] shutdown: going to close listening sockets...
I REPL [signalProcessingThread] shutting down replication subsystems
I REPL [signalProcessingThread] Stopping replication reporter thread
I REPL [signalProcessingThread] Stopping replication fetcher thread
I REPL [signalProcessingThread] Stopping replication applier thread
Hi
could you found anything interesting from spulunkd.log or /var/log/messages or "dmesg -T" ?
Could there be an OoM (out of memory) situation? This should be seen on messages or with dmesg command.
r. Ismo