topic Skipped indexing error in Getting Data In

Skipped indexing error

mznikkip — Mon, 30 Jul 2012 16:38:21 GMT

I have two indexers and both are forwarding their data to the other. Today I saw an error stating Splunk skipping indexing, etc. I checked the disk space for each: 1 is at 94% utilization and the other at 14%. I'm assuming that since I am forwarding data the disk space is being used up fast. How do I resolve this problem? I read the section on setting disk limits; it seems that the index for os is approaching its limit on both indexers. Do I need to erase some data or increase the disk limit?

Re: Skipped indexing error

Takajian — Tue, 31 Jul 2012 06:17:17 GMT

If you want to store more data onn your indexers, you need to increase the disk space. Otherwise, you need to erase data in order to keep available disk space for indexing new data.

Re: Skipped indexing error

mznikkip — Tue, 31 Jul 2012 13:26:56 GMT

And by increasing disk space, you mean increasing the limit that is set in Manager > Indexes? Do I increase the limit of the 'os' index or the 'main' index or both?