Monitoring Splunk

Is it possible to delete files under dispatch when "The minimum free disk space (5000MB)" has been reached?

Koushik_Katta
Explorer

Hi Team ,

We are getting this message in Splunk:

The minimum free disk space (5000MB) reached for /opt/splunk/var/run/splunk/dispatch

Can we delete the files under dispatch or is there any alternate solution? What if delete the files under dispatch as temporary solution, will there be any impact?

Thanks

0 Karma
1 Solution

btaylor
Splunk Employee
Splunk Employee
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...