Monitoring Splunk

Why won't disk space Health Status alert go away?

jankowsr
Path Finder

Splunk Enterprise 8.0.4.1

There was a low disk space issue and Health Status alert was raised as expected. But now there is plenty of disk space and the message says:

04-22-2022 15:05:05.257 +0000 WARN DiskMon - MinFreeSpace=5000. The diskspace remaining=221121 is less than 2 x minFreeSpace

jankowsr_0-1650640098860.png

221121 is definitely not less than than 2x5000

Am I missing something or is it a bug?

Labels (1)
0 Karma

jankowsr
Path Finder
0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@jankowsr  - Can you please once try to run Health Checks manually once? (Settings > Monitoring Console > Health Check > Start)

* Also, open Splunk in Incognito Window to see the results once.

-------
I hope this helps!!

0 Karma

jankowsr
Path Finder

the disk_space check passes but it does not seem to clear alert

jankowsr_0-1650648248783.png

 

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@jankowsr  - I would check on my browser incognito windows.

And wait for a day to see if it gets auto resolved if it's not mission critical.

Otherwise/Then I will raise a support case with Splunk.

0 Karma

jankowsr
Path Finder

The screenshot I provided was already incognito window.

And in my opinion the fact whether it was incognito mode or not should not matter. At the end web application should manage cookies/etags/browser cache/whatever and if it needs incognito window in order to work properly I would still consider it as a bug. Unless we suspect that client browser or intermediate proxy does not honor web standards but it's typically not the case.

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...