Monitoring Splunk

Minimum Free Disk Space for Splunk Universal Forwarder

jaracan
Communicator

In Splunk Enterprise, the minimum free disk space (5000MB) is needed. For Splunk Universal Forwarder, what is the minimum free disk space?

Labels (2)
Tags (3)
0 Karma

nareshinsvu
Builder

Please refer below link

https://answers.splunk.com/answers/172716/minimum-disk-space-for-splunk-6x-universal-forward.html

And note: Disable kv-store on your forwarders (if it is heavy forwarder) to avoid additional storage impacts.

https://answers.splunk.com/answers/336932/how-to-disable-kvstore-on-a-heavy-forwarder.html

0 Karma

nareshinsvu
Builder

Also It all depends on how much you are forwarding. If it is in GBs, you don't need 5GB. But just be safe and go with defaults.

0 Karma

jaracan
Communicator

Hi nareshinsvu, so what's the default minimum free disk space for UF? is it 5GB? I had check the link you provided, but there is no solid number that they provided.

0 Karma

nareshinsvu
Builder

Yes, it is mentioned as 5GB

https://docs.splunk.com/Documentation/Splunk/latest/Installation/Systemrequirements#Recommended_hard...

Maintain a minimum of 5GB of free hard disk space on any Splunk Enterprise instance, including forwarders, in addition to the space required for any indexes. See Estimate your storage requirements in Capacity Planning for a procedure on how to estimate the space you need. Failure to maintain this level of free space can degrade performance and cause operating system failure and data loss.

0 Karma

nareshinsvu
Builder

Hope it helped? Kindly accept and/or upvote my response

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...