Reporting

how many jobs is an acceptable number

hugocvg
Explorer

I getting the warning about the jobs in my screen "Too many search jobs found in the dispatch directory" and I was getting rid of them with the clean-dispatch command, starting with the oldest ones, but now I only have todays and yesterdays jobs. Is it OK to keep just the ones from today? or should I increase the limit (limis.conf)?

Tags (1)
0 Karma

jtrucks
Splunk Employee
Splunk Employee

The number of jobs is dependent largely on how much hardware you have. If you have plenty of space and lots of RAM and CPU cycles available, you can turn up lots of these settings. If you are resources constrained, you don't want to turn up the settings on things like this much because you might start having issues, of course.

If you don't need the dispatch files from jobs before today, I believe you most certainly can get rid of old jobs.

--
Jesse Trucks
Minister of Magic
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...