Splunk Search
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
Highlighted

Why is a single instance of splunk not running query and giving an error "CacheManager - Last run failed to evict requested bytes"?

kmevans
New Member
‎03-09-2018 09:55 AM 
03-09-2018 12:51:44.372 -0500 WARN  CacheManager - Last run failed to evict requested bytes. Performing eviction in urgent mode for path=/opt/splunk/var/lib/splunk/audit/db
03-09-2018 12:51:44.372 -0500 INFO  CacheManager - Eviction results: count=0, test_count=0, bytes_evicted=0, bytes_needed=15912517632, elapsed_ms=1
03-09-2018 12:51:44.372 -0500 WARN  CacheManager - Unable to evict enough data. Evicted size=0 instead of size=15912517632

Cannot find any documentation of cause or resolution
Can use splunk gui but queries will not run

0 Karma
Reply
Highlighted

Re: Why is a single instance of splunk not running query and giving an error "CacheManager - Last run failed to evict requested bytes"?

kmevans
New Member
‎03-09-2018 10:40 AM

never mind .

0 Karma
Reply
Highlighted

Re: Why is a single instance of splunk not running query and giving an error "CacheManager - Last run failed to evict requested bytes"?

woodcock
Esteemed Legend
‎07-21-2018 10:20 AM

Don't keep us in suspense, share your solution and then click Accept. Help others learn from your mistakes!

0 Karma
Reply
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.