topic Free up space on the index in Knowledge Management

Free up space on the index

romitsn — Fri, 13 Jun 2014 20:34:34 GMT

I have quite a few hot db and warm in one of my index - sharp. Can I delete the files under the rawdata directory like the journal.gz to clean up some space?

Will that impact the index in any way?

Re: Free up space on the index

Ayn — Fri, 13 Jun 2014 20:52:56 GMT

Um yes, it is definitely going to impact things. The journal is part of how Splunk stores and makes data searchable. If you start deleting this or other files in the index directories Very Bad Things start happening.

Re: Free up space on the index

martin_mueller — Fri, 13 Jun 2014 21:09:30 GMT

To free up space on that index you can set the maximum size for the index to a smaller value. Then Splunk will clean up old stuff without breaking buckets.