topic Re: Problem as per screen shot - 500MB min disk space reached in Getting Data In

Problem as per screen shot - 500MB min disk space reached

Tonyrakus — Fri, 21 Aug 2020 00:50:07 GMT

Hi Guys

I have Splunk enterprise installed. I have pulled across some directory's with files inside ( from Kali ).

The issue is I cannot bring up the files in the search and reporting app..

I believe it is because of the Messages in the screen shot below.. which I have no idea how to fix.. even after reading some forums..

I am non IT person.. and new to Splunk.

Any help would be great .

Re: Problem as per screen shot - 500MB min disk space reached

Tonyrakus — Fri, 21 Aug 2020 02:25:55 GMT

This is another screen shot of the index path the data writes to.. I need to somehow get more space..

Re: Problem as per screen shot - 500MB min disk space reached

isoutamo — Fri, 21 Aug 2020 04:47:02 GMT

as you already noticed, you are running out of disc space. You must get additional volume for splunk indexes. Then you have two options: increase /opt/splunk or create own fs/volume group + splunk volume where you move your indexes. There are many examples how this should do on answers.
r. Ismo