Here's the error I'm getting Search not executed: The minimum free disk space (5000MB) reached for /opt/splunk/var/run/splunk/dispatch. user=admin. Here are the changes I made to move the splunk DB from original location to new place to increase space. `[root@splunk]# cat etc/splunk-launch.conf Version 6.0 Modify the following line to suit the location of your Splunk install. If unset, Splunk will use the parent of the directory this configuration file was found in SPLUNK_HOME=/opt/splunk By default, Splunk stores its indexes under SPLUNK_HOME in the var/lib/splunk subdirectory. This can be overridden here: SPLUNK_DB=/opt/splunk/var/lib/splunk SPLUNK_DB=/home/splunk Splunkd daemon name SPLUNK_SERVER_NAME=splunkd Splunkweb daemon name SPLUNK_WEB_NAME=splunkweb ` BEFORE: My root partition was almost full but the home partition has a lot of free space [root@splunk]# df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/vg_centos6-lv_root 17G 15G 949M 94% / tmpfs 939M 0 939M 0% /dev/shm /dev/sda1 477M 96M 356M 22% /boot /dev/sdb1 158G 42G 108G 29% /home So i used this command to copy the files from old location on root partition to new location on home partition [root@splunk]# splunk stop [root@splunk]# cp -R var/lib/splunk/ /home/splunk/ [root@splunk]# rm -fR /opt/splunk/var/lib/splunk/ [root@splunk]# splunk start AFTER: Verify splunk is working properly and error message about space is gone. [root@splunk]# df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/vg_centos6-lv_root 17G 9.5G 6.0G 62% / tmpfs 939M 0 939M 0% /dev/shm /dev/sda1 477M 96M 356M 22% /boot /dev/sdb1 158G 42G 108G 29% /home ... View more