Splunk Enterprise

The available disk space for the /opt directory is less than 5.0G

aateeq
Explorer

After I successfully installed the Splunk Enterprise on my Oracle Vbox, I got a message that says: "The minimum free disk space (5000MB) reached for /opt/splunk/var/run/splunk/dispatch".

Then I used the (sudo du -sh /opt) command and I found that the /opt directory resides the space 3.8G (less than 5.0G), even though, I allocated 40G for the machine at all !!

My question is how to increase the disk space given for the /opt directory?

PS: The health status of IoWalt under the resource usage is RED!!

 

Labels (2)
0 Karma

yannK
Splunk Employee
Splunk Employee

it is not really a splunk question, this is a question for your linux sys admin or your VM provider

- to adjust the disk space on your mounts

 - or to create a new mount (like /opt/splunk ) on a large disk

PS : also if this box will be an indexer, you may also want to relocate the splunk indexes ( default on /$SPLUNK_HOME/var/lib/splunk on a different mount with enough space to grow over time, as you ingest)

Tags (1)
0 Karma

aateeq
Explorer

@yannK First of all, thanks for your response. Actually, I asked my question here because I followed the official installation instructions by installing Splunk in the /opt directory, so I thought it could be an installation issue. 

0 Karma
Get Updates on the Splunk Community!

.conf25 Registration is OPEN!

Ready. Set. Splunk! Your favorite Splunk user event is back and better than ever. Get ready for more technical ...

Detecting Cross-Channel Fraud with Splunk

This article is the final installment in our three-part series exploring fraud detection techniques using ...

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...