Deployment Architecture

Why do I have a disk space warning for /opt/splunk/var/lib/splunk/audit/db but i have over 300 GB free on disk

MoienABO
Loves-to-Learn Lots

I have 2 partitions on my centos. The first one is 20 GB and mounted on / and the second one is 300 GB and mounted on /opt. Splunk service is in /opt/splunk directory  and i have 300 free on this partition. but i got disk space warning on / partition. 

please help!

Labels (2)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @MoienABO,

how much disk space have you in the other partition?

what is your $SPLUNK_DB? (you can see it in [Settings -- Server Settings -- General Settings -- Path to indexers]

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...