Hi All,
I need your help urgently, I am facing issue with one of the forwarder as it keeps taking lots of space in /opt directory and due to which sometimes it stops running. Upon checking further I noticed that this directory is taking maximum space.
Hi @prateeksawhney,
You need to create new limits.conf file in /opt/splunk/etc/system/local/.
FYI: Default config files exist in /opt/splunk/etc/system/default/ but you should never edit these.
If this reply helps you, an upvote/like would be appreciated.