How do I stop indexer automatically if I reached my data limit?

[jangid]

How Do I stop indexer if I reached my daily data limit?

[sdaniels · Accepted solution]

There is nothing in Spunk to do that automatically. I suppose you could create an alert to monitor the amount of indexed data for a given day. You'll find several examples on Splunkbase. Then have the alert kick off a script to do whatever you want.