The TEMP tablespace is used for sorts too big to be done in memory, or during index creation, complex join operations, or other types of DDL activities. Specifically, it is only used for ACTIVE queries or DDL commands, and is not something that would fill up over the course of a day or two incrementally. If you are running out of TEMP space because of your Splunk queries, then it is because the SQL is not optimized correctly - it will fill up every time you run it. Resetting your connections won't change this at all. You need to revisit your SQL inputs and see if there is anything you can change: remove any "order by" clauses for starters (do your sorting later in Splunk Search) and see if there is anything else you can do to improve the efficience of your queries.
... View more