<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Where does batch search write temp files? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Where-does-batch-search-write-temp-files/m-p/310328#M58322</link>
    <description>&lt;P&gt;Anytime! &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
    <pubDate>Wed, 30 Aug 2017 20:21:57 GMT</pubDate>
    <dc:creator>jkat54</dc:creator>
    <dc:date>2017-08-30T20:21:57Z</dc:date>
    <item>
      <title>Where does batch search write temp files?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Where-does-batch-search-write-temp-files/m-p/310324#M58318</link>
      <description>&lt;P&gt;I am seeing this error on panels:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[indexer01]  Streamed search execute failed because: Error in 'BatchSearch': The search failed. Unable to write temp files to disk.
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Where is it trying to write?  (Yes, it's Windows and I know that Windows permissions suck.)&lt;/P&gt;</description>
      <pubDate>Wed, 30 Aug 2017 17:14:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Where-does-batch-search-write-temp-files/m-p/310324#M58318</guid>
      <dc:creator>lycollicott</dc:creator>
      <dc:date>2017-08-30T17:14:23Z</dc:date>
    </item>
    <item>
      <title>Re: Where does batch search write temp files?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Where-does-batch-search-write-temp-files/m-p/310325#M58319</link>
      <description>&lt;P&gt;Depends on your splunk version but usually its here or somewhere within: C:\Program Files\Splunk\var\run&lt;/P&gt;</description>
      <pubDate>Wed, 30 Aug 2017 18:14:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Where-does-batch-search-write-temp-files/m-p/310325#M58319</guid>
      <dc:creator>jkat54</dc:creator>
      <dc:date>2017-08-30T18:14:34Z</dc:date>
    </item>
    <item>
      <title>Re: Where does batch search write temp files?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Where-does-batch-search-write-temp-files/m-p/310326#M58320</link>
      <description>&lt;P&gt;I think its talking about the dispatch dir though: &lt;/P&gt;

&lt;P&gt;C:\Program Files\Splunk\var\run\splunk\dispatch&lt;/P&gt;</description>
      <pubDate>Wed, 30 Aug 2017 18:16:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Where-does-batch-search-write-temp-files/m-p/310326#M58320</guid>
      <dc:creator>jkat54</dc:creator>
      <dc:date>2017-08-30T18:16:21Z</dc:date>
    </item>
    <item>
      <title>Re: Where does batch search write temp files?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Where-does-batch-search-write-temp-files/m-p/310327#M58321</link>
      <description>&lt;P&gt;Thanks for confirming.&lt;/P&gt;</description>
      <pubDate>Wed, 30 Aug 2017 18:52:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Where-does-batch-search-write-temp-files/m-p/310327#M58321</guid>
      <dc:creator>lycollicott</dc:creator>
      <dc:date>2017-08-30T18:52:58Z</dc:date>
    </item>
    <item>
      <title>Re: Where does batch search write temp files?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Where-does-batch-search-write-temp-files/m-p/310328#M58322</link>
      <description>&lt;P&gt;Anytime! &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 30 Aug 2017 20:21:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Where-does-batch-search-write-temp-files/m-p/310328#M58322</guid>
      <dc:creator>jkat54</dc:creator>
      <dc:date>2017-08-30T20:21:57Z</dc:date>
    </item>
  </channel>
</rss>

