Running splunk diag gets stuck at "Getting index listings..."

[andrei_radu]

Hi,

I am trying to create a diag file on one of my indexers and the process is stuck at "Getting index listings..." for more than 1 hour.

Has anyone came across something similar and have a suggestion how to troubleshoot?

Regards!

[dineshraj9 · Accepted solution]

Sometimes diag files can really consume a lot of space. You can filter out some of the contents like this -

./splunk diag --exclude */.snapshot/* --exclude */dispatch/* --exclude */search_pool/etc/users/* --exclude *.tgz* --exclude *.tar* --exclude *.gz* --exclude *.zip* --exclude *.png --exclude *.jpg --exclude *.jpeg --exclude *.gif --exclude *.so* --exclude *.old.* --exclude *.csv.* --exclude *.bundle*

[andrei_radu]

Thanks, excluding some parts of the diag file worked.