Hotdata running the out of disk space

[lksridhar]

Hi Folks,

We have indexer and the hotdata volume is running the out of disk space. we don't have option reduce frozen period and extend the disk space

If manually move the bucket from hot to clod volume it is not recommend by splunk. shall we change the index storage path on index.conf file,is it will work to fix the issue.

Could you please solution for this.

[gjanders]

As per the indexes.conf documentation have you set the homePath.maxDataSizeMB to the appropriate size for your index(es)?
You could also use volume sizing to control the size of volume of disk.

I would recommend using both an overall volume size and a homePath.maxDataSizeMB to prevent your hot partition from running out of space and to prevent an out of control index from consuming too much of the hot disk space...

[adonio]

if there is no space on the hotdata volume, buckets will roll to cold automatically.
if you have enough space on cold, i think you are pretty safe against losing data.
not sure why would you like to change the index path.
hope it helps