There is rs_Swap directory under my Splunk var folder.
It is filling very fast and causes disk space issue.
Any inputs on that?
There is some information if you search in Answers for rsCache.data
https://answers.splunk.com/answers/235659/just-installed-dbx-v2-what-is-rscachedata-used-for.html