HI Splunk pals,
I am getting an error when trying to write a relatively large file using tstats.
splunk "StatsFileWriterLz4" write failed file=<path_to_file>.lz4
The SPL is a tstats query that creates a massive data table used as a base search to power several reports in a dashboard.
I know that the LZ4 application took over for Gzip in Splunk version 6-7 or something. I have yet to find any other docs on how to begin troubleshooting this issue.
I would paste my SPL, but I have a customer that ... let's say would be less than happy with me sharing this info.
Any suggestions are welcome!