I currently have the Splunk Add-on for Microsoft Cloud Services installed on a heavy forwarder, pulling logs from blob storage.
I'm wondering how or what manages the checkpoint files located under modinputs. They do not seem to be rotating out or deleting.
Even after deleting an input from the GUI the checkpoint folder still remains.
Thanks in advance.
Did you try deleting the folder that store the checkpoint file after deleting the input? I think the folder should be named: mscs_azure_blob