Deployment Architecture

Keep getting this error message on my Light Forwarder client

balbano
Contributor

Hi,

For some reason I keep seeing the following error message coming from one of my light forwarder clients.

01-12-2012 14:52:02.545 ERROR BTreeCP - failed: failed to mkdir /opt/splunk/var/lib/splunk/fishbucket/splunk_private_db/snapshot.tmp: No space left on device

More than enough space should be available for this so called dir to get created and the appropriate file permissions are in place to make this happen.

Anybody ever see this? If so how can this be corrected.

Let me know.

Thanks.

Brian

Tags (2)
0 Karma

LewisWheeler
Communicator

Had same issue - was due to no iNodes remaining, caused by some scripts creating too many files. Ran df -i as per sowings comment above and it was fixed.

0 Karma

sowings
Splunk Employee
Splunk Employee

"No space left on device" can sometimes occur if you've run out of inodes. In addition to checking "df", consider also checking "df -i".

0 Karma

jonathon
Path Finder

I just had the same issue on a couple of my light forwarders, but without the "no space" message. I restarted the forwarders that that took care of the issue. I will update once I dig into this a little more.

0 Karma
Get Updates on the Splunk Community!

Unlock New Opportunities with Splunk Education: Explore Our Latest Courses!

At Splunk Education, we’re dedicated to providing top-tier learning experiences that cater to every skill ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...