topic Re: Space Issues In my C-drive in Monitoring Splunk

Space Issues In my C-drive

harshavrath — Wed, 30 Apr 2014 09:16:51 GMT

Hi,

Splunk is installed in C-drive C:\Program Files\Splunk\var\log\splunk

My Question is can i move the splunk folder(which has occupied 1.04GB) to some otheer drive.

Has anyone come across this issue, I really need your help splunkers.

Any Help is Appreciated,

Thanks.

Re: Space Issues In my C-drive

dmaislin_splunk — Wed, 30 Apr 2014 10:49:52 GMT

That would not preserve the data that has already been indexed. You need to read this:

http://docs.splunk.com/Documentation/Splunk/6.0.3/Indexer/Moveanindex#For_Windows_users

Re: Space Issues In my C-drive

harshavrath — Wed, 30 Apr 2014 12:07:54 GMT

long time ago I have changed the path in System Settings>General Settings under that "Path to indexes=Specified the path"

So from then on all my indexed data is located in the Specified path

So i wanted to know what is the cause for the 1GB of data that is been populated under C:Program Files\Splunk\var\log\splunk

Re: Space Issues In my C-drive

dmaislin_splunk — Wed, 30 Apr 2014 12:12:15 GMT

Change your log settings. Read this:

http://docs.splunk.com/Documentation/Splunk/6.0.3/Troubleshooting/WhatSplunklogsaboutitself

For permanent changes, use $SPLUNK_HOME/etc/log.cfg instead.

Re: Space Issues In my C-drive

dmaislin_splunk — Wed, 30 Apr 2014 12:13:36 GMT

http://answers.splunk.com/answers/959/how-can-i-control-the-size-and-number-of-splunks-internal-logs

Re: Space Issues In my C-drive

dmaislin_splunk — Wed, 30 Apr 2014 12:14:08 GMT

Try searching more on Splunk Answers as many of these questions have been answered several times already.

Re: Space Issues In my C-drive

harshavrath — Wed, 30 Apr 2014 12:18:18 GMT

http://answers.splunk.com/answers/126360/disk-space-error
this is my post after which i changed the path in General Settings

Re: Space Issues In my C-drive

harshavrath — Tue, 13 May 2014 08:53:31 GMT

Hi David,
According to your link
http://docs.splunk.com/Documentation/Splunk/6.0.3/Indexer/Moveanindex#For_Windows_users
In Step-4 Copying the Indexes to new path
it is given as
copy "C:\Program Files\Splunk\var\lib\splunk\." D:\new\path\for\index /s /e /v /o /k
But in my Splunk Instance the var\\lib has occupied very less space but my var\\log\\splunk has occupied 1.52GB.