Getting Data In

Moving Splunk Databases



The mount on our Indexer box that stores the databases and runs splunk is about to run out of memory (is at 99%). We have another mount that has lots of space that we can move stuff to but I am not sure what to move.

I notice that /lib is taking up most of the memory, i think this is where the main dbs are. Is there a way I can move my db to the other mount?

Is it possible to do this easily without upsetting the data?


Tags (2)
1 Solution




Thanks. I think I actually want to reword my question to look at a better solution. Will delete this and raise another

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!