Deployment Architecture

Keep getting this error message on my Light Forwarder client



For some reason I keep seeing the following error message coming from one of my light forwarder clients.

01-12-2012 14:52:02.545 ERROR BTreeCP - failed: failed to mkdir /opt/splunk/var/lib/splunk/fishbucket/splunk_private_db/snapshot.tmp: No space left on device

More than enough space should be available for this so called dir to get created and the appropriate file permissions are in place to make this happen.

Anybody ever see this? If so how can this be corrected.

Let me know.



Tags (2)
0 Karma


Had same issue - was due to no iNodes remaining, caused by some scripts creating too many files. Ran df -i as per sowings comment above and it was fixed.

0 Karma

Splunk Employee
Splunk Employee

"No space left on device" can sometimes occur if you've run out of inodes. In addition to checking "df", consider also checking "df -i".

0 Karma

Path Finder

I just had the same issue on a couple of my light forwarders, but without the "no space" message. I restarted the forwarders that that took care of the issue. I will update once I dig into this a little more.

0 Karma
Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

How I Instrumented a Rust Application Without Knowing Rust

As a technical writer, I often have to edit or create code snippets for Splunk's distributions of ...