Deployment Architecture

DISABLED-rb in colddb, date quite fresh, still free space volume, when it happened with disabled_rb and disabled_db

mxyy31ruth
Loves-to-Learn Lots

Anyone has ideas about this problem, I am not sure in which situation it will create disabled_rb in /colddb. Any documentation about this kinds of buckets?

0 Karma

DaMu
New Member

I spotted these files too, did you ever find a(n easy) fix? Looking to remove them but not sure 🙂

 

0 Karma

DaMu
New Member

Replying to myself after having had contact with support.

Issue here is probably a large difference between disk space and configured data retention.

Meaning the retention setting is much larger than the disk space will allow. 

Configuring the retention period to be closer to reality should be the fix.

0 Karma
Get Updates on the Splunk Community!

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...