How to resolve error "Search not executed: The minimum free disk space (50000MB) reached" after clearing the dispatch folder?

[urapaveerapan]

Dear guys,

I got an error "Search not executed: The minimum free disk space (50000MB) reached for /opt/splunk/var/run/splunk/dispatch"

I've tried several suggestions but it's not working such as
1. Increase/Decrease number in "Pause indexing if free disk space (in MB)" and restart the Splunk
2. Clear data in dispatch folder by delete in Jobs. Now the dispatch folder contains just 4.6M

However the error still shows and I cannot search any data. Please help.

[urapaveerapan · Accepted solution]

I finally got the solution.

The disk space is too low.
If you use linux, You can check it by type "df -h"
For me, the available space in /dev/mapper/system-opt is lower than what I set in "Pause indexing if free disk space (in MB)".

As a workaround, I set "Pause indexing if free disk space (in MB)" is be lower than the available disk. Then the solution is to increase the disk space.

[ddrillic]

Moving forward, this can help - Search not executed: The minimum free disk space (50000MB) reached for /home/username/splunk/var/run...

[urapaveerapan]

Thank you.