Deployment Architecture

default.old directories in SHC

strive
Influencer

Hi,

There are thousands of default.old.<date-time> directories under /opt/splunk/etc/apps/<app_name>/

There was similar thread in this forum - https://answers.splunk.com/answers/236307/search-head-cluster-defaultold-directories.html
According to this it should have been fixed in 6.6. But i do not see this in list of Fixed Issues for that version.

Has this issue been resolved? If yes, in which version?

Thanks,
Strive

Tags (2)
0 Karma

skalliger
SplunkTrust
SplunkTrust

Hi,

I am not sure that this is really a bug. Because this behaviour has been around for quite some time now. Those are simply backup directories which can be deleted manually.

What I think the Splunk employee was actually referring to, was this bug:
Splunk not cleaning up $SPLUNK_HOME/var/run/searchpeers of .delta files and matching directories whose only non-empty subdirectory has the .index extension
..which has been fixed in version 6.6.3.

Neither have I seen any known issue related to this (http://docs.splunk.com/Documentation/Splunk/6.6.5/ReleaseNotes/Knownissues).

Skalli

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...