clean dispatchtmp ?


Splunk 4.3.3, I'm getting a disk space error:
The minimum free disk space (2000MB) reached for /opt/splunk/var/run/splunk/dispatch
The problem is displatchtmp is the directory with old data. Some directories in dispatchtmp have 6GB of data and don't seem to match anything in dispatch.

The clean-dispatch application seems to require a directory to move old data to. We don't have another disk with 6GB+ free. And if we did would it clean out the dispatchtmp directory?

Question can I purge dispatchtmp without impact? Do I need to shutdown the service first?


Tags (1)

Splunk Employee
Splunk Employee

You can stop splunk and clean manually.
The dispatch tool is useful to triage the search artifacts by time.

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!