Automatic Detention - Splunk Community

Deployment Architecture

Ended of hard disk space in SHC-01. is it possible to send a piece of data to SHC-02 to free up space in SHC-01

You can safely clean dispatch folder;

./splunkd clean-dispatch /tmp/ -24h@h

This command will delete the files older than 24h in dispatch folder.

If this reply helps you an upvote and "Accept as Solution" is appreciated.

Get Updates on the Splunk Community!

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to Officially Supported Splunk ...