Monitoring Splunk

disk space allocation for newly created index

riqbal47010
Path Finder

will at the time of index creation the defined disk size allocated once. or it is allocated based on index utilization.

Labels (2)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @riqbal47010,
it's allocated at the index creation time but it's possible to change also in a second time (and many times), but it isn't dinamic (not allocated based on index utilization).
For more infos see at https://docs.splunk.com/Documentation/Splunk/8.0.2/Admin/Indexesconf .

Ciao.
Giuseppe

View solution in original post

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @riqbal47010,
it's allocated at the index creation time but it's possible to change also in a second time (and many times), but it isn't dinamic (not allocated based on index utilization).
For more infos see at https://docs.splunk.com/Documentation/Splunk/8.0.2/Admin/Indexesconf .

Ciao.
Giuseppe

0 Karma

riqbal47010
Path Finder

So in cluster environment, I create some Indexes for POC products. like recorded future. I created one index for recorded future at the time of POC. after that I am not receiving the data even the data that I received passed its retention policy. it was written to Archive. Now that index has zero events.
how can I reclaim my disk space back.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @riqbal47010,
if your index is present in one indexes.conf file, managed by the Master Node, you can use it: you haven't to reclaim your disk space back.
If not, you have to ask to the Splunk admin to rebuild it.

Ciao.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...