Increasing the dispatch_dir_warning_size

ssankeneni · ‎09-09-2013

I am getting this warning on my search heads and I have increased my search limit to 30,000 on limits.conf file
[search]
dispatch_dir_warning_size = 30000

Is this going to have any issues ? The default one is 2000

jbsplunk · ‎09-09-2013

If you've got a lot of results in the dispatch folder, your search performance is going to degrade. The downside of making the warning size so large is that your search performance is likely going to be negatively effected before you've been warned about the size of the folder.

Increasing the dispatch_dir_warning_size

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Casting Call: Compete in Cyber Games

Data Management Digest – June 2026

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

Join the Conversation

Increasing the dispatch_dir_warning_size

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Casting Call: Compete in Cyber Games

Data Management Digest – June 2026

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...