From splunkd.log (might miss characters on right border ... this IS effing windows...) 04-23-2008 16:16:39.538 INFO loader - Pass 1 - Loading plugins 04-23-2008 16:16:39.538 INFO LicenseManager - Initializing 04-23-2008 16:16:39.538 INFO LicenseManager - Looking for bytequotaprocessor... 04-23-2008 16:16:39.538 INFO LicenseManager - Checking for previous keyed license 04-23-2008 16:16:39.679 INFO loader - Initializing from configuration 04-23-2008 16:16:39.679 INFO loader - Instantiated plugin: queueinputprocessor 04-23-2008 16:16:39.679 INFO loader - Instantiated plugin: tcpoutputprocessor 04-23-2008 16:16:39.679 INFO loader - Instantiated plugin: streamoutputprocessor 04-23-2008 16:16:39.679 INFO loader - Instantiated plugin: diskusageprocessor 04-23-2008 16:16:39.679 INFO loader - Instantiated plugin: bytequotaprocessor 04-23-2008 16:16:39.679 INFO loader - Instantiated plugin: signingprocessor 04-23-2008 16:16:39.679 INFO loader - Instantiated plugin: indexprocessor 04-23-2008 16:16:39.725 ERROR databasePartitionPolicy - No hot database 04-23-2008 16:55:09.989 INFO loader - Splunkd starting (build 34603). 04-23-2008 16:55:09.989 INFO loader - System info: Windows, unknown, 2, 5, Intel. 04-23-2008 16:55:09.989 INFO loader - Getting configuration data from: D:\Program Files\Splunk\etc\myinstall\splunkd.xml 04-23-2008 16:55:09.989 INFO loader - SPLUNK_MODULE_PATH environment variable not found - defaulting to D:\Program Files\Splunk\e \modules 04-23-2008 16:55:09.989 INFO loader - loading modules from D:\Program Files\Splunk\etc\modules 04-23-2008 16:55:09.989 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\input\batchfileloader 04-23-2008 16:55:09.989 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\distributedDeployment 04-23-2008 16:55:10.005 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\distributedDeploymentClient 04-23-2008 16:55:10.005 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\distributedSearch 04-23-2008 16:55:10.005 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\input 04-23-2008 16:55:10.005 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\input\exec 04-23-2008 16:55:10.005 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\input\TCP 04-23-2008 16:55:10.005 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\input\UDP 04-23-2008 16:55:10.005 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\input\log4jTCP 04-23-2008 16:55:10.005 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\input\splunkTCP 04-23-2008 16:55:10.005 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\input\syslogUDP 04-23-2008 16:55:10.005 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\input\tailfile 04-23-2008 16:55:10.005 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\input\wineventlog 04-23-2008 16:55:10.021 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\input\fschangemanager 04-23-2008 16:55:10.021 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\internal 04-23-2008 16:55:10.021 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\internal\scheduler 04-23-2008 16:55:10.021 INFO loader - Processing Module ----> D:\Program Files\Splunk\etc\modules\parsing 04-23-2008 16:55:10.021 INFO loader - Writing out composite configuration file: D:\Program Files\Splunk\var\run\splunk\composite. l 04-23-2008 16:55:10.036 INFO loader - Pass 1 - Loading plugins 04-23-2008 16:55:10.036 INFO LicenseManager - Initializing 04-23-2008 16:55:10.036 INFO LicenseManager - Looking for bytequotaprocessor... 04-23-2008 16:55:10.036 INFO LicenseManager - Checking for previous keyed license 04-23-2008 16:55:10.177 INFO loader - Initializing from configuration 04-23-2008 16:55:10.177 INFO loader - Instantiated plugin: queueinputprocessor 04-23-2008 16:55:10.177 INFO loader - Instantiated plugin: tcpoutputprocessor 04-23-2008 16:55:10.177 INFO loader - Instantiated plugin: streamoutputprocessor 04-23-2008 16:55:10.177 INFO loader - Instantiated plugin: diskusageprocessor 04-23-2008 16:55:10.177 INFO loader - Instantiated plugin: bytequotaprocessor 04-23-2008 16:55:10.177 INFO loader - Instantiated plugin: signingprocessor 04-23-2008 16:55:10.177 INFO loader - Instantiated plugin: indexprocessor 04-23-2008 16:55:10.239 ERROR databasePartitionPolicy - No hot database ------------------------- [build 34603] Access violation, cannot write at address [0x00000020] Exception address: [0x0056CD2C] Crashing thread: indexerPipe ContextFlags: [0x0001003F] Dr0: [0x00000000] Dr1: [0x00000000] Dr2: [0x00000000] Dr3: [0x00000000] Dr6: [0x00000000] Dr7: [0x00000000] SegGs: [0x00000000] SegFs: [0x0000003B] SegEs: [0x00000023] SegDs: [0x00000023] Edi: [0x00000000] Esi: [0x00000005] Ebx: [0x04BE60D0] Edx: [0x00000012] Ecx: [0x04BE5900] Eax: [0x00000000] Ebp: [0x04AAF358] Eip: [0x0056CD2C] ? SegCs: [0x0000001B] EFlags: [0x00010206] Esp: [0x04AAF1DC] SegSs: [0x00000023] Backtrace: Frame 0 @[0x04AAF358]: [0x04BE5C00] ? Frame 1 @[0x7C829F3D]: [0x00000877] ? Frame 2 @[0x840FC084]: (Can't read) Crash dump written to: D:\Program Files\Splunk\var\log\splunk\crash-2008-04-23-16-55-10.dmp OS: Windows Arch: i386 Windows / unknown / 2 / 5 / Intel terminating... ------------------------------------------ [build 34603] Access violation, cannot read at address [0x1CF391A8] Exception address: [0x005D8067] Crashing thread: CallbackRunnerThread ContextFlags: [0x0001003F] Dr0: [0x00000000] Dr1: [0x00000000] Dr2: [0x00000000] Dr3: [0x00000000] Dr6: [0x00000000] Dr7: [0x00000000] SegGs: [0x00000000] SegFs: [0x0000003B] SegEs: [0x00000023] SegDs: [0x00000023] Edi: [0x0411FBB8] Esi: [0x091BE040] Ebx: [0x0411FC88] Edx: [0x00000004] Ecx: [0x1CF39188] Eax: [0x1D75F020] Ebp: [0x091BE064] Eip: [0x005D8067] ? SegCs: [0x0000001B] EFlags: [0x00010246] Esp: [0x0411FB30] SegSs: [0x00000023] Backtrace: Frame 0 @[0x091BE064]: [0x1AE564B0] ? Frame 1 @[0x22C360E8]: [0x0C9DEE60] ? Frame 2 @[0x235FB6F8]: [0x1A706700] ? Frame 3 @[0x009B0830]: (Frame below stack) Crash dump written to: D:\Program Files\Splunk\var\log\splunk\crash-2008-04-23-10-31-38.dmp OS: Windows Arch: i386 Windows / unknown / 2 / 5 / Intel