Automatic Detention - Splunk Community

Deployment Architecture

Ended of hard disk space in SHC-01. is it possible to send a piece of data to SHC-02 to free up space in SHC-01

You can safely clean dispatch folder;

./splunkd clean-dispatch /tmp/ -24h@h

This command will delete the files older than 24h in dispatch folder.

If this reply helps you an upvote and "Accept as Solution" is appreciated.

Get Updates on the Splunk Community!

Break the Build: Inside the KubeDoom Lounge at .conf26

You step up to the machine. The pixelated corridors of a certain 1993 FPS load in front of you, EMP Pulse ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...