Hey there, Have you tried pulling the docker image manually or did you just hit START? If not, try this:   1. SSH into your Splunk server 2. Check what docker images are present   docker images​   3. Pull the latest version of Golden Image CPU image manually from Docker Hub. As of today, its version 5.1.2     docker pull phdrieger/mltk-container-golden-cpu:5.1.2​   4. The image you just pulled should now be visible     docker images​   5. Update the DSDL app to the latest version. As of today, this is 5.1.2 6. Restart or refresh your search head 7. Now try to start the container again     In case you want any other docker image, here is the official repository where you find all images to every container image that is available in DSDL: https://hub.docker.com/u/phdrieger Let me know if I can help you any further.  ... View more

OK. If your overall usage of $SPLUNK_HOME differs greatly from the size of your indexes, check if you don't have crash logs and coredumps lying around (you only need them if you're gonna debug your crashes with support; otherwiseyou can safely delete them). ... View more