Splunk Search

Failed to reap - because of directory not empty

thbrix
New Member

We have a lot of theese errors in splunked.log, I have searched a lot to find an solution but to no success.

ERROR DispatchReaper - Failed to reap /data/splunk/var/run/splunk/dispatch/scheduler_admin_c3BsdW5rX2FwcF93aW5kb3dzX2luZnJhc3RydWN0dXJl_RMD5ce1429bf7fcd63ea_at_1529591400_160 because of Directory not empty

Im not sure what details is needed for helping me. Its a singleserver setup and Splunk is running on RHEL. Splunk is running as the user splunk (not root), and i have checked permissions on the folders mentioned in the log.

I would appreciate any pointers you can help with, thanks!

Tags (1)
0 Karma

CarsonZa
Contributor

you might run chown -Rf splunk. /opt/splunk just to be sure.

else you could try to clean the dispatch directory.

./splunk cmd splunkd clean-dispatch help

should get you started

Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...