I'm running search and suddenly there aren't any results neither in the Search & Report app or Hadoop connect search. I receive the error below:
reason="Search not executed: Dispatch Command: The minimum free disk space (5000MB) reached for $PATH
user=admin.", concurrencycategory="historical", concurrencycontext="userinstance-wide", currentconcurrency=0, concurrency_limit=5000
Limits for controlling disk space in Splunk can be changed
The relevant stanza and parameter of interest in server.conf ($SPLUNK_HOME/etc/system/local/server.conf) is:
[diskUsage] minFreeSpace = 500
For more details please look here:
Hope this helps.
Your Splunk disk has less than 5GB of free space, which is the least Splunk requires to do a search. Free up some space on the disk and you should be able to search again. A good place to look for things to delete is the dispatch directory ($SPLUNK_HOME/var/run/splunk/dispatch). It often contains old search artifacts that were never cleaned up for one reason or another.