All Apps and Add-ons

Disabling KVStore parts of the Palo Alto app

cboillot
Contributor

We are having issue with the KVStore taking up a large amount of space. Until we get that issue sorted, is there a way to remove the KV looks ups from the app? When we disable the KVStore we keep getting minemeldfeeds_lookup errors until we disable the app.

0 Karma

abaumbusch
Explorer

Hey, cboillot! I can currently seeing the same issue with the huge KVStore. Did you ever manage to work out a good solution?

0 Karma

isoutamo
SplunkTrust
SplunkTrust
Can you cleanup old events from it? You can find how to do it from answers.
r. Ismo
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...