I keep getting the "minimum free disk space (5000MB) reached for /var/run/splunk/dispatch" on one of my heavy forwarders. There are no jobs that I can see in the job manager. Not sure where to go from this point. Should I just delete all of the search artifacts in the directory since it is a forwarder?
↧