All Apps and Add-ons

Change in Database causes FlowReceiver to stop?

colinregan
New Member

I have run into the common problem of running out of disk space (less than 5000 mb error). To fix this, I've attached a 10+Tb drive by changing $SPLUNK_DB within my splunk-start.conf file. I've also exported SPLUNK_DB to the path of the new db location. All this works but when i go into Splunk Stream App to check if I am still getting flows, nothing pops up except an error and FlowReceiver being marked as 'inactive' I'm not sure why this is happening any help would be much appreciated.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI! Discover how Splunk’s agentic AI ...

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...