Splunk SOAR

Phantom : Warm-standby failover is not working as the filesystem size of /opt/phantom/db is more than /tmp/? How to fix it?

sdubey_splunk
Splunk Employee
Splunk Employee

Warm-standby failover is not working as the filesystem size of /opt/phantom/db is more than /tmp/. How to fix it?

Labels (1)
Tags (1)
0 Karma
1 Solution

sdubey_splunk
Splunk Employee
Splunk Employee
  • Easiest fix increase space allocated to /tmp filesystem then problem solved( if possible).

on latest 4.8 version, can specify where to dump tmp db. also only restores tmp db if it's copied over.

View solution in original post

0 Karma

sdubey_splunk
Splunk Employee
Splunk Employee
  • Easiest fix increase space allocated to /tmp filesystem then problem solved( if possible).

on latest 4.8 version, can specify where to dump tmp db. also only restores tmp db if it's copied over.

0 Karma
Get Updates on the Splunk Community!

Advanced Splunk Data Management Strategies

Join us on Wednesday, May 14, 2025, at 11 AM PDT / 2 PM EDT for an exclusive Tech Talk that delves into ...

Uncovering Multi-Account Fraud with Splunk Banking Analytics

Last month, I met with a Senior Fraud Analyst at a nationally recognized bank to discuss their recent success ...

Secure Your Future: A Deep Dive into the Compliance and Security Enhancements for the ...

What has been announced?  In the blog, “Preparing your Splunk Environment for OpensSSL3,”we announced the ...