Hello,
I am always getting the below message in my Search head's
Even though I wrote:
distsearch.conf:
[replicationBlacklist]
staylocal = *.csv
limits.conf:
[lookup]
max_memtable_bytes = 1000000000
The current bundle directory contains a large lookup file that might cause bundle replication fail.
The path to the directory is
C:\Program Files\Splunk\var\run\61CFC563-07F6-44A0-9DFF-31D6A01BA6D9-1571219534-1571220067.delta.
Please do help me in fixing that issue and how to troubleshoot that.
Thanks in Advance!
↧