Forums

Splunk forwarder gets killed

At my work we use Splunk to monitor everything, and since they have a free option I figured I might as well put that on my own website too. I have a Splunk Enterprise running on my server (AKA laptop in fuse box) at home which gathers all the log data and makes it searchable, and I am trying to install a Splunk Forwarder here on PythonAnywhere that forwards the log data to the Splunk Enterprise instance.

It gets to forward a few events but then I see in the Splunk log files:

03-01-2018 23:19:33.160 +0000 FATAL ProcessRunner - Unexpected EOF from process runner child!
03-01-2018 23:19:33.160 +0000 ERROR ProcessRunner - helper process seems to have died (child killed by signal 15: Terminated)!

If I understand it correctly the Splunk process gets killed by some automated something. But why? Can I prevent that from happening? Can I find somewhere why it gets killed?

where is your Splunk instance running on? is it a PythonAnywhere console? or a scheduled task? or from a webapp?

I start it from a console using ./Splunk start that boots Splunk as a separate process.

That is because our console servers get restarted periodically for maintenance.

See this for how to set up a long running task from the schedule task page.

Okay, I will try that! Thanks conrad!