Hello a212830! I'm sure you're already aware, but it's still worth mentioning for the benefit of others, SHP (Search Head Pooling) is deprecated as of 6.2. Now on to the error message... On the surface, the error message does appear to point to SAN performance as the primary performance concern. This assumes that $SPLUNK_HOME points to /apps/splunk/ and this is your SAN filesystem. However, other resource constraints could be causing systemic issues and this error could just be a red herring. To confirm, I would run Bonnie++ to test storage performance on both the NAS and SAN filesystems. Check out the awesome Bonnie++ app on Splunkbase -> https://splunkbase.splunk.com/app/3002/ ... View more