Splunk Search

clean dispatchtmp ?


Splunk 4.3.3, I'm getting a disk space error:
The minimum free disk space (2000MB) reached for /opt/splunk/var/run/splunk/dispatch
The problem is displatchtmp is the directory with old data. Some directories in dispatchtmp have 6GB of data and don't seem to match anything in dispatch.

The clean-dispatch application seems to require a directory to move old data to. We don't have another disk with 6GB+ free. And if we did would it clean out the dispatchtmp directory?

Question can I purge dispatchtmp without impact? Do I need to shutdown the service first?


Tags (1)

Splunk Employee
Splunk Employee

You can stop splunk and clean manually.
The dispatch tool is useful to triage the search artifacts by time.

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!


Or Learn More in Our Blog >>