Splunk Enterprise

The available disk space for the /opt directory is less than 5.0G

aateeq
Explorer

After I successfully installed the Splunk Enterprise on my Oracle Vbox, I got a message that says: "The minimum free disk space (5000MB) reached for /opt/splunk/var/run/splunk/dispatch".

Then I used the (sudo du -sh /opt) command and I found that the /opt directory resides the space 3.8G (less than 5.0G), even though, I allocated 40G for the machine at all !!

My question is how to increase the disk space given for the /opt directory?

PS: The health status of IoWalt under the resource usage is RED!!

 

Labels (2)
0 Karma

yannK
Splunk Employee
Splunk Employee

it is not really a splunk question, this is a question for your linux sys admin or your VM provider

- to adjust the disk space on your mounts

 - or to create a new mount (like /opt/splunk ) on a large disk

PS : also if this box will be an indexer, you may also want to relocate the splunk indexes ( default on /$SPLUNK_HOME/var/lib/splunk on a different mount with enough space to grow over time, as you ingest)

Tags (1)
0 Karma

aateeq
Explorer

@yannK First of all, thanks for your response. Actually, I asked my question here because I followed the official installation instructions by installing Splunk in the /opt directory, so I thought it could be an installation issue. 

0 Karma
Get Updates on the Splunk Community!

Holistic Visibility and Effective Alerting Across IT and OT Assets

Instead of effective and unified solutions, they’re left with tool fatigue, disjointed alerts and siloed ...

SOC Modernization: How Automation and Splunk SOAR are Shaping the Next-Gen Security ...

Security automation is no longer a luxury but a necessity. Join us to learn how Splunk ES and SOAR empower ...

Ask It, Fix It: Faster Investigations with AI Assistant in Observability Cloud

  Join us in this Tech Talk and learn about the recently launched AI Assistant in Observability Cloud. With ...