Splunk Enterprise Security

$SPLUNK_HOME/var/lib/splunk/modinputs taking up disk space

singhvishakha29
Engager

Hi All,

The data checkpoint file for cloudtrail logs is taking up a lot of disk space (over 100 GB). Is this a normal behaviour?
Where can I check the modular input script. We are having issues of full disk space due to this.
Any help would be appreciated

0 Karma

navarec
Explorer

Hello,

I have got similar issue. Were you able to solve it?

0 Karma

DanielPi
Moderator
Moderator

Hi @navarec  -

I’m a Community Moderator in the Splunk Community. 
This question was posted 4 years ago, so it might not get the attention you need for your question to be answered. We recommend that you post a new question so that your issue can get the  visibility it deserves. To increase your chances of getting help from the community, follow these guidelines in the Splunk Answers User Manual when creating your post.

Thank you! 

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...