Automatic Detention - Splunk Community

Deployment Architecture

Ended of hard disk space in SHC-01. is it possible to send a piece of data to SHC-02 to free up space in SHC-01

You can safely clean dispatch folder;

./splunkd clean-dispatch /tmp/ -24h@h

This command will delete the files older than 24h in dispatch folder.

If this reply helps you an upvote and "Accept as Solution" is appreciated.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers, So you searched, “what is the name of the usb key inserted by bob smith?” Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register Is your ...