Splunk Search

Why am I getting error "Search not executed: The minimum free disk space (1000MB) reached for /opt/splunk/var/run/splunk/dispatch."?

rshaik26
Engager

Hi

I am getting this error on search

Search not executed: The minimum free disk space (1000MB) reached for /opt/splunk/var/run/splunk/dispatch. user=admin.

I have checked other posts regarding this issue, which suggested that either you clear up space from the directory, or create a symlink to disk with more space.

How do I fix this without doing both as suggested above?
Why am I seeing this error in the first place when there is only some 224KB of data in that dispatch folder?

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Go to Settings->Server Settings->General Settings and change the "Pause indexing if free disk space (in MB) falls below" value to a number smaller than 1000 (1GB). This should get Splunk working again. You should then take steps to clear up space on that disk before the new limit is reached.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Go to Settings->Server Settings->General Settings and change the "Pause indexing if free disk space (in MB) falls below" value to a number smaller than 1000 (1GB). This should get Splunk working again. You should then take steps to clear up space on that disk before the new limit is reached.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...