Hello ,
I have splunk search head installed on Linux server . I received an alert for high disk space usage. While troubleshooting , I found that **/opt/splunk/var/run/splunk/srtemp** has two directory which were consuming almost 95% of the disk space. In search of an answer , I found one cause . That is dashboards and reports can generate charts and that may be stored in **/opt/splunk/var/run/splunk/srtemp** .
An hour later , I found that it reduced to 56% as one of two directories has been removed. I have two questions regarding this:
1. Is the directory removed automatically from **/opt/splunk/var/run/splunk/srtemp** as it is a temp directory.
2. If I need to do it manually , then what is the best practise to limit the disk size for **/opt/splunk/var/run/splunk/srtemp**
so that I can avoid such high disk usage alert
I would appreciate your help
↧