Splunk Search

Link srtemp to dashboard or search

sbhale
Explorer

I get some occurrences of directories in srtemp which are a few hundred gigs in size. Is there a way to link those directories to their source? As in which dashboard is resulting in those.
I want to see which dashboards are doing this and maybe find a way to make them more efficient.
Those directories are transient but cause people to see "not enough free space in dispatch" errors.

mikeydee77
Path Finder

Me too... version 7.1

0 Karma

mikeydee77
Path Finder

Me too... version 7.1

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...