A deep dive into a failure to cleanly restart Splunk while running under systemd on Linux. This post discusses tracing options, problems found with Oracle Linux version 8 and Splunk restarts with particular TA’s.
The full post is available on medium, Splunk, systemd, and a clean shutdown, and on Splunk Lantern as Troubleshooting slow Splunk platform restarts when running under systemd on Linux