file_tracking_db_threshold_mb = 500. However weirdly in the Fishbucket folder 1.4gb is taken up by splunk_private_db, over which ~1gb of that is consumed by ...
file_tracking_db_threshold_mb =
splunk cmd btool --debug limits list | grep file_track /opt/splunkforwarder/etc/ system/default/limits.conf file_tracking_db_threshold_mb = 500.
Previous message: [Bro] Bro and Splunk forwarder; Next message:
conf, try changing file_tracking_db_threshold_mb in the [inputproc] stanza to a lower value. I did not find a version where this is not listed as a ...
file_tracking_db_threshold_mb = 500 [iplocation] db_path = /Applications/ splunk612/share/GeoLite2-City-201407.mmdb kbains:share kbains$ ...
Splunk® Enterprise 6.3.1
to limits.conf stanza=inputproc setting=file_tracking_db_threshold_mb.
try changing file_tracking_db_threshold_mb in the [inputproc] stanza to a lower value.
-bash-4.1$ ./splunk cmd btool --debug limits list | grep file_track /opt/ splunkforwarder/etc/system/default/limits.conf file_tracking_db_threshold_mb = 500 Thanks.