Lately our searchheads will run into issues where the srtemp folder baloons to 80+GB and fills the local hard drive. To temporarily fix, I have to shut down splunk and then run the splunk command:
clean-srtemp
It will then be good for several days to a week and eventually it's back again, rinse and repeat. I'm curious what my options are for determining what is causing the srtemp folder to fill consistently?
