@Jakcdee ,
What version of NetWitness are you currently on?
Is this a new or existing VLC?
When you say the VLC continues to receive logs, how do you know this if the VLC won't start?
Have you looked at the /var/log/messages file for any errors?
Are any of the VLC partitions at 100% full?
Usually when a VLC stops and will not restart it is because the VLC has filled its hard drive with captured logs and has not been able to offload them to a Log Decoder's log collector. As such the rabbitmq messages back up and the service shuts down. If this is the case you will need to move some of the rabbitmq messages out of the partition so the service starts running again and then fix the issue between the VLC and the Log Decoder. Then you can re-ingest the messages that were moved and you should be good to go.
However, if you have never performed these steps before I highly suggest opening a Support case to get assistance. If this is what the issue is you could loose logs if you just start pulling rabbitmq messages out of the partition. You need to move them in a specific way to allow for their re-ingestion.
I hope this helps.
