Hey Splunk Community,
I'm having an issue with the $SPLUNK/var/lib/splunk/kvstore/mongo directory.
I have a tonne of files present in this directory dated from several months ago at around the 512MB size range ending in ".ns" and ".0".
If we remove these files over say an age of 30 days would this have any impact on the SIEM or if this action safe?
