<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: rsCache.data really huge file ( dbx v 2) in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/rsCache-data-really-huge-file-dbx-v-2/m-p/192281#M98586</link>
    <description>&lt;P&gt;I think its actually required and there isn't any configuration that I can see to relocate it.&lt;/P&gt;

&lt;P&gt;Also "huge" is relative to the volume of data that db connect is shuffling around.&lt;/P&gt;

&lt;P&gt;How big was huge? &lt;/P&gt;</description>
    <pubDate>Wed, 13 May 2015 02:24:30 GMT</pubDate>
    <dc:creator>Lucas_K</dc:creator>
    <dc:date>2015-05-13T02:24:30Z</dc:date>
    <item>
      <title>rsCache.data really huge file ( dbx v 2)</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/rsCache-data-really-huge-file-dbx-v-2/m-p/192280#M98585</link>
      <description>&lt;P&gt;My Splunk partition is filling, due to one file...&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;/opt/splunk/var/lib/splunk/rscache.data&lt;/STRONG&gt; &lt;/P&gt;

&lt;P&gt;...this file contains logging from a DBconnect v2 connection that I setup last week. &lt;/P&gt;

&lt;P&gt;Deleted the file. How can I tune this? Nothing jumps out at me within dbx. &lt;/P&gt;

&lt;P&gt;Thanks.&lt;/P&gt;</description>
      <pubDate>Mon, 11 May 2015 15:57:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/rsCache-data-really-huge-file-dbx-v-2/m-p/192280#M98585</guid>
      <dc:creator>some_guy</dc:creator>
      <dc:date>2015-05-11T15:57:26Z</dc:date>
    </item>
    <item>
      <title>Re: rsCache.data really huge file ( dbx v 2)</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/rsCache-data-really-huge-file-dbx-v-2/m-p/192281#M98586</link>
      <description>&lt;P&gt;I think its actually required and there isn't any configuration that I can see to relocate it.&lt;/P&gt;

&lt;P&gt;Also "huge" is relative to the volume of data that db connect is shuffling around.&lt;/P&gt;

&lt;P&gt;How big was huge? &lt;/P&gt;</description>
      <pubDate>Wed, 13 May 2015 02:24:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/rsCache-data-really-huge-file-dbx-v-2/m-p/192281#M98586</guid>
      <dc:creator>Lucas_K</dc:creator>
      <dc:date>2015-05-13T02:24:30Z</dc:date>
    </item>
  </channel>
</rss>

