Backfilling will increase the number of files in your spool/splunk/ directory. Is there a way to check the status of what's already indexed? Any way to increase the time or prioritize the write to summary index?
↧