Monitoring Splunk

Why is the rs_swap directory under var folder of Splunk filling very fast and causing disk space issues?

girishchhabra19
New Member

There is rs_Swap directory under my Splunk var folder.
It is filling very fast and causes disk space issue.

Any inputs on that?

0 Karma

plaxos
Explorer

There is some information if you search in Answers for rsCache.data
https://answers.splunk.com/answers/235659/just-installed-dbx-v2-what-is-rscachedata-used-for.html

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...