clean dispatchtmp ?

[paulahoffman]

Splunk 4.3.3, I'm getting a disk space error:
The minimum free disk space (2000MB) reached for /opt/splunk/var/run/splunk/dispatch
The problem is displatchtmp is the directory with old data. Some directories in dispatchtmp have 6GB of data and don't seem to match anything in dispatch.

The clean-dispatch application seems to require a directory to move old data to. We don't have another disk with 6GB+ free. And if we did would it clean out the dispatchtmp directory?

Question can I purge dispatchtmp without impact? Do I need to shutdown the service first?

Thanks

[yannK]

You can stop splunk and clean manually.
The dispatch tool is useful to triage the search artifacts by time.