https://community.splunk.com/t5/Installation/underlying-storage-errors/m-p/407919#M8737 <P>when many users are running searches during meetings, we do see errors related to underlying storage issues.<BR /> this happens only when many users are on the search head.</P> <P>i am not sure if we can resolve this problem over the community , but any insights or ideas that i can consider to make it better.</P> <P>already i am looking to cluster the indexers + cluster the search heads with multi site configuration.</P> Tue, 26 Feb 2019 04:12:02 GMT jiaqya 2019-02-26T04:12:02Z https://community.splunk.com/t5/Installation/underlying-storage-errors/m-p/407919#M8737 <P>when many users are running searches during meetings, we do see errors related to underlying storage issues.<BR /> this happens only when many users are on the search head.</P> <P>i am not sure if we can resolve this problem over the community , but any insights or ideas that i can consider to make it better.</P> <P>already i am looking to cluster the indexers + cluster the search heads with multi site configuration.</P> Tue, 26 Feb 2019 04:12:02 GMT https://community.splunk.com/t5/Installation/underlying-storage-errors/m-p/407919#M8737 jiaqya 2019-02-26T04:12:02Z https://community.splunk.com/t5/Installation/underlying-storage-errors/m-p/407920#M8738 <P>what kind of errors? As you know, when a lot of concurrent searches run, it adds pressure on the IOPS on the storage layer and also consumes disk space for the users.</P> <P>I assume you may have some custom role/storage setting to limit the disk space used by users. This way you can protect the SHs by not running out of disk space and also allow a better user experience by queing mutliple search requests from same users.</P> <P>Yes, increasing storage/IOPS, clustering, limiting user disk quota etc.. will also help.</P> Tue, 26 Feb 2019 11:39:17 GMT https://community.splunk.com/t5/Installation/underlying-storage-errors/m-p/407920#M8738 lakshman239 2019-02-26T11:39:17Z