ERROR SummarySizeManager

[mwdbhyat]

Hi there,

I am seeing the following error in Splunk:

ERROR SummarySizeManager - Cannot compute size on disk for dir="/opt/splunk/var/lib/splunk//datamodel_summary/414_C827F652-385D-4F20-B8FE-45F266F00C90": No such file or directory

There are many of these in the week however on weekends if there is a rolling restart or upgrade, the system is flooded with these messages. Has anyone come across this before?

thanks!

[rkantamaneni_sp]

Hi @mwdbhyat ,

I know you asked this quite a while ago, but just in case it's still bugging you or others are searching, here's the answer:

It's either known issue SPL-182238 (internally referenced), which should be benign in nature. It's a message based on an OS race condition trying to calculate a path size while one of the sub-directories aren't available/readable yet or an issue with corrupt buckets in the environment (a bucket that was attempted to be created and didn’t finish, in which case you could search for them and remove appropriately). You'd typically encounter this after a rolling restart as there could be many buckets being written too and all the buckets are checked. If the message is constantly happening and flooding your logs, then you should notify Splunk Support to review, otherwise it can be ignored and you can make a request of your Splunk Customer Success Team help address the logging of this message.