We have upgraded splunk version 8.2.6 from 8.0.1. Post upgrade we are observing IOWait status yellow, how can we solve this issue?
Before upgrade we didn't observed this issue.
Attaching the snapshot for the reference -
In case you haven't figured this out yet, you can check the following Splunk Answer for more details: https://community.splunk.com/t5/Splunk-Enterprise/Why-is-the-health-status-of-IOWait-red/m-p/565904
In addition, if you believe this to be beyond tuning in your environment, then for attempting to disable, you can review the following Splunk Answer: https://community.splunk.com/t5/Splunk-Enterprise/Cannot-Disable-Health-Report-Features-in-8-2-2/m-p...
(we've created a Support ticket and will be awaiting updates on the open SPL).