Monitoring Splunk

splunk crash upon receiving too many sockets

yanivoren
New Member

Hi,
I'm working on splunk free, I try to run multiple connections by sockets.
If I try to many sockets (about 350), the splunk server is stuck and I'm getting these errors:
In web service : errors "Splunkd daemon is not responding"
In splunkd : warnings "write failed with :104" or "write failed with :32".
How many connection can splunk handle? and is it suppose to crash if too many connections are opened?
TIA

Tags (1)
0 Karma
1 Solution

LukeMurphey
Champion

A defect in Windows causes sockets to be leaked. This can be fixed by applying a patch; see the Microsoft KB.

View solution in original post

LukeMurphey
Champion

A defect in Windows causes sockets to be leaked. This can be fixed by applying a patch; see the Microsoft KB.

LukeMurphey
Champion

Note that increasing the number of ephemeral ports per http://support.microsoft.com/kb/q196271 only delays the recurrence of the issue.

Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...