Deployment Architecture

Why do I have a disk space warning for /opt/splunk/var/lib/splunk/audit/db but i have over 300 GB free on disk

MoienABO
Loves-to-Learn Lots

I have 2 partitions on my centos. The first one is 20 GB and mounted on / and the second one is 300 GB and mounted on /opt. Splunk service is in /opt/splunk directory  and i have 300 free on this partition. but i got disk space warning on / partition. 

please help!

Labels (2)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @MoienABO,

how much disk space have you in the other partition?

what is your $SPLUNK_DB? (you can see it in [Settings -- Server Settings -- General Settings -- Path to indexers]

Ciao.

Giuseppe

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...