$SPLUNK_HOME/var/lib/splunk/persistantstorage contains a file fschangemanager_state. This seems to be s SQLite 3.x database file. Is the file only used for fschange tracking? What other "tracking" could take place in the persistantstorage folder?
Moot point. Deprecated in Splunk 5.0
View solution in original post
