We have a 12 node Hadoop Cluster and we are using splunk to index all log files (Hbase, Cloudera Manager, Jobtracker, name node, and other assortments of logs). Currently our NAS device where we store all the splunk indexes is getting 100% full (df -h command show 100%).
How can we limit the disk space being used by Splunk indexing to 50 gigs. We have tried 'clean event data' but it filled up within a week.
... View more