Automatic Detention - Splunk Community

Deployment Architecture

Ended of hard disk space in SHC-01. is it possible to send a piece of data to SHC-02 to free up space in SHC-01

You can safely clean dispatch folder;

./splunkd clean-dispatch /tmp/ -24h@h

This command will delete the files older than 24h in dispatch folder.

If this reply helps you an upvote and "Accept as Solution" is appreciated.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...