Deployment Architecture

Dispatch folder constantly filling up

ajparagas
Engager

We have a question as the dispatch folder seems to be constantly growing. However, our storage for the splunk is 200G and we are still seeing the index error and would like to know how to resolve this issue.

Thanks,

Tags (3)

piebob
Splunk Employee
Splunk Employee

i'm taking a guess here that you're seeing an error about performance possibly being impacted due to the number of jobs in your dispatch directory. if that's the case and what you're asking is to make the error go away, you can change the value of dispatch_dir_warning_size in $SPLUNK_HOME/etc/system/local/limits.conf to something higher.

if that's not it, please be more specific about the 'index error' you're seeing.

Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...