On the universal forwarder, splunkd.exe is creating many crash dump files that are filling up disk space, which affects the services on the server. Please let me know if you have any configurations to disable crash dumping.
Crash dump by splunk provides a lot of useful information to troubleshoot the root case of the issues. We would like to recommend you to keep it enabled unless it affects the genuine services of the server due to the dump files.
Please find the information below for your reference;
system wide
http://stackoverflow.com/questions/6035112/disable-application-crash-dumps-on-windows-7
https://4sysops.com/archives/how-to-disable-windows-error-reporting/
For a specific process by names, like splunkd.exe
http://superuser.com/questions/1069578/disable-werfault-exe-on-crashes-for-specific-processes-on-win...
Crash dump by splunk provides a lot of useful information to troubleshoot the root case of the issues. We would like to recommend you to keep it enabled unless it affects the genuine services of the server due to the dump files.
Please find the information below for your reference;
system wide
http://stackoverflow.com/questions/6035112/disable-application-crash-dumps-on-windows-7
https://4sysops.com/archives/how-to-disable-windows-error-reporting/
For a specific process by names, like splunkd.exe
http://superuser.com/questions/1069578/disable-werfault-exe-on-crashes-for-specific-processes-on-win...