https://community.splunk.com/t5/Getting-Data-In/If-one-indexer-of-6-is-about-to-reach-capacity-in-an-indexer/m-p/149476#M30441 <P>The indexer will enter 'detention' state (by default, when there is 5gb left), where it will no longer get any replications / indexing. See <A href="http://docs.splunk.com/Documentation/Splunk/6.2.4/Indexer/Howtomonitoracluster#Peers_tab">http://docs.splunk.com/Documentation/Splunk/6.2.4/Indexer/Howtomonitoracluster#Peers_tab</A> (detention status) and <A href="http://docs.splunk.com/Documentation/Splunk/6.2.4/Indexer/Setlimitsondiskusage">http://docs.splunk.com/Documentation/Splunk/6.2.4/Indexer/Setlimitsondiskusage</A> (minFreeSpace dictates when we go into 'detention')</P> Thu, 30 Jul 2015 18:39:17 GMT dxu_splunk 2015-07-30T18:39:17Z https://community.splunk.com/t5/Getting-Data-In/If-one-indexer-of-6-is-about-to-reach-capacity-in-an-indexer/m-p/149475#M30440 <P>One of my indexers is about to reach its storage capacity. I am trying to figure out if/when that happens, will A) all indexers stop indexing or B) will clustering and indexing continue as normal and avoid using indexer 3? </P> Thu, 30 Jul 2015 13:12:11 GMT https://community.splunk.com/t5/Getting-Data-In/If-one-indexer-of-6-is-about-to-reach-capacity-in-an-indexer/m-p/149475#M30440 santorof 2015-07-30T13:12:11Z https://community.splunk.com/t5/Getting-Data-In/If-one-indexer-of-6-is-about-to-reach-capacity-in-an-indexer/m-p/149476#M30441 <P>The indexer will enter 'detention' state (by default, when there is 5gb left), where it will no longer get any replications / indexing. See <A href="http://docs.splunk.com/Documentation/Splunk/6.2.4/Indexer/Howtomonitoracluster#Peers_tab">http://docs.splunk.com/Documentation/Splunk/6.2.4/Indexer/Howtomonitoracluster#Peers_tab</A> (detention status) and <A href="http://docs.splunk.com/Documentation/Splunk/6.2.4/Indexer/Setlimitsondiskusage">http://docs.splunk.com/Documentation/Splunk/6.2.4/Indexer/Setlimitsondiskusage</A> (minFreeSpace dictates when we go into 'detention')</P> Thu, 30 Jul 2015 18:39:17 GMT https://community.splunk.com/t5/Getting-Data-In/If-one-indexer-of-6-is-about-to-reach-capacity-in-an-indexer/m-p/149476#M30441 dxu_splunk 2015-07-30T18:39:17Z