Linux Server Crashed "Kernel panic - not syncing: Hard LOCKUP" due to Splunk

(Doc ID 2310084.1)

Last updated on SEPTEMBER 25, 2017

Applies to:

Linux OS - Version Oracle Linux 5.0 to Oracle Linux 7.4 [Release OL5 to OL7U4]
Linux x86-64
Linux x86

Symptoms

Oracle Linux server running Splunk application got crashed with "Kernel panic - not syncing: Hard LOCKUP".

Found lots of processes related to Splunk in "defunct state".

114053 113785 22 ffff88040ebfbec0 UN 0.1 105896 28852 splunkd
122091 113785 1 ffff88040f7dde20 UN 3.0 1273908 1062076 splunkd
122098 113785 31 ffff880856201f60 UN 2.8 1187892 1013380 splunkd
122115 113785 39 ffff88040f7daf10 UN 2.8 1263672 1007868 splunkd
122127 113785 15 ffff880861f0ce70 UN 2.9 1134640 1034048 splunkd
122128 113785 41 ffff88087fd30fb0 UN 3.1 1191980 1092380 splunkd
122137 113785 38 ffff8803fae44e70 UN 3.2 1239076 1136628 splunkd
122147 113785 15 ffff8800740cce70 UN 3.0 1169452 1067956 splunkd
122158 113785 15 ffff88086c573ec0 UN 2.8 1189940 999308 splunkd
122164 113785 39 ffff880856202f10 UN 3.3 1265676 1164612 splunkd
 

Changes

 N/A

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms