Hello, What is that the disk itself was 20tb but the colleagues that have setup it at the beginning somehow created /dev/sda4 where /opt/splunk is mounted only 9tb, so we increased the /dev/sda4 to 20tb now. We measure it with df -h LVM was not used in this case, unfortunately. ... View more

Hello isoutamo, Thank you for answer. We have increased the disks of the two nodes in site1 to 20tb, but the management still sees them as 9tb. We haven't restarted splunk services on them. Shall we? Also the new one that we added does not seem to be working: "Unable to distribute to peer named new-server at uri=new-server:8089 using the uri-scheme=https because peer has status=Down. Verify uri-scheme, connectivity to the search peer, that the search peer is up, and that an adequate level of system resources are available. See the Troubleshooting Manual for more information." I can confirm that the service is running and listening on port 8089 and also reachable using telnet. To answer your question about the replication factor - it is origin:1 , site1:1 , site2:1 , total:2 Regards ... View more