Receiving following error on searchead for forwarder:
checkpoint failed: removal of dir /opt/splunkforwarder/var/lib/splunk/fishbucket/splunk_private_db/snapshot.old failed: Directory not empty
Hi shrinkhalarana, I believe this error can be related with bucket issue, you can try to repair the bucket using this command for single bucket.
the splunk service on indexer have to be stopped in order to repair a bucket.
run splunk rebuild
for further information check this document
https://docs.splunk.com/Documentation/Splunk/7.3.2/Indexer/Bucketissues#Rebuild_a_single_bucket