topic Getting "DMC Alert - Near Critical Disk Usage" in Monitoring Splunk

Getting "DMC Alert - Near Critical Disk Usage"

schlote — Tue, 16 Feb 2021 21:49:56 GMT

We are at 91% so not immediately urgent but how do I find out why this is alerting? on one of 2 indexers. Other is at ~80 percent...

We are new to splunk, been running for a few months now. First time this alert came up.

Re: Getting "DMC Alert - Near Critical Disk Usage"

scelikok — Wed, 17 Feb 2021 13:03:54 GMT

Hi @schlote,

They should be coming from Monitoring Console Platform alerts. The default threshold for Disk Usage is 80. You can check/edit these alerts settings on your Monitoring Console | Settings | Alert Setup page.

Re: Getting "DMC Alert - Near Critical Disk Usage"

schlote — Wed, 17 Feb 2021 14:33:31 GMT

Any suggestions on things to check regarding usage?

Should I be concerned that this is filling up? or is this normal...

usage is still at 91% today so it has not increased in the last 24h.

Re: Getting "DMC Alert - Near Critical Disk Usage"

scelikok — Wed, 17 Feb 2021 14:48:14 GMT

It depends on your total disk capacity and your setup. In order to give some idea;

- Splunk will stop indexing and responding to searches if disk free space gets lower than 5 GB default.

- If your indexes are in those disks you should check your volume settings for indexes.

- Total volumes should be lower than total disk size.

- OS and Datamodels should be taken into account.

You can see below document;

https://docs.splunk.com/Documentation/Splunk/8.1.2/Indexer/Configureindexstoragesize