Linux 4.2.0-27-generic #32~14.04.1-Ubuntu
in /var/log/syslog
Nov 24 04:10:25 kernel: [6690966.699401] init: splunk main process ended, respawning
Nov 24 04:10:26 kernel: [6690967.095850] init: splunk main process (27149) terminated with status 1
We have a upstart job script created for Splunk and it seems working fine to start/stop the Splunk process. But when a new app is deployed to the forwarder via the deployment server and the Splunk process on the forwarder is restarted, it seems that the upstart job manager lost the track of the process and keep spawning (of course without success).
Question 1: is there a way to just stop the forwarder instead of restarting it while an app is deployed? If so, the upstart job manager should be able to detect the process is down, start it and keep track of it.
Question 2: is there a way to modify our upstart job to pick up the new process restarted and keep track of it?
... View more