We are using a Splunk forwarder to forward the Watchdog log to Splunk for alerting. The forwarder crashes on some agents and cannot be restarted. I fixed this last week by reinstalling the forwarder but they have crashed again. Splunk have said this isn't a Splunk issue, it's something on the Windows boxes. Has anyone come across this on DataMiner agents before?
We are using Windows Server 2012 R2 and running DataMiner 10.1.0.0
Thanks.
Hi Paul,
You can have a look into the Event Viewer to see if you can spot anything around the time the forwarder crashes. If you have an element in DataMiner monitoring the Windows machine, you can enable trending on CPU and memory for the Splunk forwarder process. This could help to see if there are any CPU or memory leaks. Another thing you could check is if there is no anti-virus or anti-malware software interfering with the Splunk forwarder.