The only limit on the file size here is the 50 GB f/s in which we installed Splunk. It basically filled up the file system.
Here are file sizes on the server.
-rw------- 1 splunk splunk 0 Feb 17 05:57 rsCache.key
-rw------- 1 splunk splunk 42445000704 Feb 17 14:31 rsCache.data
In another post, I see that you copy the cache.ccf from default to local, but what parameters do we need to modify to limit the size of this file?
↧