Are you a member of the Splunk Community?
- Find Answers
- :
- Apps & Add-ons
- :
- All Apps and Add-ons
- :
- How to resolve error "Search not executed: The min...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dear guys,
I got an error "Search not executed: The minimum free disk space (50000MB) reached for /opt/splunk/var/run/splunk/dispatch"
I've tried several suggestions but it's not working such as
1. Increase/Decrease number in "Pause indexing if free disk space (in MB)" and restart the Splunk
2. Clear data in dispatch folder by delete in Jobs. Now the dispatch folder contains just 4.6M
However the error still shows and I cannot search any data. Please help.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I finally got the solution.
The disk space is too low.
If you use linux, You can check it by type "df -h"
For me, the available space in /dev/mapper/system-opt is lower than what I set in "Pause indexing if free disk space (in MB)".
As a workaround, I set "Pause indexing if free disk space (in MB)" is be lower than the available disk. Then the solution is to increase the disk space.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I finally got the solution.
The disk space is too low.
If you use linux, You can check it by type "df -h"
For me, the available space in /dev/mapper/system-opt is lower than what I set in "Pause indexing if free disk space (in MB)".
As a workaround, I set "Pause indexing if free disk space (in MB)" is be lower than the available disk. Then the solution is to increase the disk space.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Moving forward, this can help - Search not executed: The minimum free disk space (50000MB) reached for /home/username/splunk/var/run...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you.
Fun with Regular Expression - multiples of nine
[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...
What’s New & Next in Splunk SOAR
