I found it in this folder structure --> C:\Program Files\Splunk\etc\system\default\web.conf   ... View more

Hi it depends what you are doing. If just testing wit only some inputs and one or two user it’s doable, but you need to wait many times to get results to your queries. For any reasonable use, I said that 4-6 core is minimum and splunk’s own recommendations are much higher.   That warning is meaning that splunk db has less than 5GiB disk base. Usually splunk db is under /opt/splunk/var. Just check it and add more disk base or move SPLUNK_DB to somewhere where are enough space. Docs has good instructions how to do it   r. Ismo ... View more