Reporting

how many jobs is an acceptable number

hugocvg
Explorer

I getting the warning about the jobs in my screen "Too many search jobs found in the dispatch directory" and I was getting rid of them with the clean-dispatch command, starting with the oldest ones, but now I only have todays and yesterdays jobs. Is it OK to keep just the ones from today? or should I increase the limit (limis.conf)?

Tags (1)
0 Karma

jtrucks
Splunk Employee
Splunk Employee

The number of jobs is dependent largely on how much hardware you have. If you have plenty of space and lots of RAM and CPU cycles available, you can turn up lots of these settings. If you are resources constrained, you don't want to turn up the settings on things like this much because you might start having issues, of course.

If you don't need the dispatch files from jobs before today, I believe you most certainly can get rid of old jobs.

--
Jesse Trucks
Minister of Magic
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...