1. I already searched under the index settings and all of my index files are not occupying more than 3 Go of space.  2. I'm also aware that you can't determine what configuration I have, what is installed on it etc. I'm just asking for some complementary informations about optimizing my parameters, maybe reducing tsidx files, because I think I'm forgetting something and I know I may not be aware of the best practice...  Kind regards 🙂 ... View more

Hi @PickleRick , 1. You totally right. As far as I understood, this server is for begginers use, lab etc.  2. That's right but in the past I tried to clean some of those directories in my test environment and it didn't end well 😫 What is the best practice ?  I thought I could change the minFreeSpace=5000 variable to 4000 for example ("Pause indexing if free disk space (in MB) falls below") I'm reading some post from the community but I'm not finding a clear answer about reducing the retention time or deleting colddb... I really don't want to mess things up and if you have a link to the documentation for my problem I'd appreciate it 😊   ... View more

Hello @PickleRick and @richgalloway 🙂 Thank you both for your answers ! First I will say this infrastructure is not mine but now I need to optimize it. Of course I know we can't fill the disk to the brim and I'm trying to perfectly understand the impact of my futur actions. @PickleRick I'm not quite sure of what uses up my space since I'm not an expert Splunk yet haha Here is what I found :  When I run the command : sudo du -sh /* So, do I need to reduce the retention time of maybe something is using more space than it should be ?  Have a nice day all !            ... View more

Edit :  It seems I must change the parameter "Pause indexing if free disk space (in MB) falls below" from 5000 to 4000 for example ?   Am I right ?    ... View more