How to stop splunkd.exe from creating crash dump files under var\log\splunk on a universal forwarder?

[sylim_splunk]

On the universal forwarder, splunkd.exe is creating many crash dump files that are filling up disk space, which affects the services on the server. Please let me know if you have any configurations to disable crash dumping.

[sylim_splunk · Accepted solution]

Crash dump by splunk provides a lot of useful information to troubleshoot the root case of the issues. We would like to recommend you to keep it enabled unless it affects the genuine services of the server due to the dump files.

Please find the information below for your reference;

• system wide
  http://stackoverflow.com/questions/6035112/disable-application-crash-dumps-on-windows-7
  
  https://4sysops.com/archives/how-to-disable-windows-error-reporting/

• For a specific process by names, like splunkd.exe
  http://superuser.com/questions/1069578/disable-werfault-exe-on-crashes-for-specific-processes-on-win...