Monitoring Splunk

splunk process compulsion stop

kobayashikenji
Explorer

Hi

I want to kill the process of Splunk.
May be performed by specifying the "PID" with this command ?

kill -9 <PID>

There is no problem?

Tags (2)
0 Karma

miteshvohra
Contributor

You can kill all processes on 'splunkd' with

kill `ps -ef | grep splunkd | egrep -v grep | awk '{print $2}'`

But, just like @esix_splunk mentioned, make sure you restart Splunk with the correct user and that, using Splunk's native commands to Start/Stop/Restart the service is much cleaner.

Mitesh.

kobayashikenji
Explorer

Thank you very much.
I wanted absolutely compulsion stop.
Normally, you run the answer @ esix_splunk.

kenji.

0 Karma

miteshvohra
Contributor

@kobayashikenji I am bit curious to know about the purpose of force-stopping Splunk. 🙂

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

This works, make sure when you restart Splunk, you are using the correct user.

But why not do '/opt/splunk/splunk stop' or 'service splunk stop'

0 Karma

kobayashikenji
Explorer

If not stop at Splunk command,
Because I want to compulsion stop.
Normally, will use the "splunk stop".
Answer Thank you very much.

0 Karma
Get Updates on the Splunk Community!

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...