Splunk index congestion is happening

[sravani387]

Hi,
I suddenly got this message "skipped indexing of internal audit event will keep dropping events until indexer congestion is remedied. Check disk space and other issues that may cause indexer to block"
I am not able to index data can anyone suggest me how to solve this.

[ddrillic]

A good response for this case at indexing congestion consistenly happening

It says -

[martin_mueller]

Did you check indexer disk space?
Assuming that's fine, continue with the distributed management console to see if you actually have indexer congestion or if your forwarder/search head is just confused.
If everything's showing as blocked in DMC, check for relevant error messages on the indexers.