Hi team ,
I want to run a diag , have seen documentation from
kindly explain me what to exclude from the diag as it is consuming more space
how to upload the diag from that ,
Hi KoushikKatta, You can run the diag by executing this from the command line `$SPLUNKHOME\bin\splunk diag`
If you wish to leave out certain components, you can add a
--disable= flag such as:
$SPLUNK_HOME/bin/splunk diag --disable=dispatch --disable=pool
This documentation you linked to has more options.
Please let me know if this answers your question!
Hi Muebel , It worked i have disabled some .csv , .dat passwords even
Thanks for the help Muebel.
In the same page of documentation, you can find examples of the items that you can exclude from the diag file (link below). Depending on for what issue you're uploading diag for Splunk Support team, you can execlute lookup and dispatch direcotry as they are generally big.
Upload instructions are also available in the same page