Hi Team,
I will do some configuration changes for the NetApp Ontap but unfortunately this error is not making it possible.
I already had deleted some logs in /opt/splunk/var/log/splunk like metrics.log.* but it did not resolve the issue.
Also try the clean-dispatch command, and also deleted the files inside the /opt/splunk/var/run/splunk/dispatch.
I took screenshot of the disk space and its minimal. But I still wondering why the error is not going away.
We can see that /opt/splunk/var is at 748MB.
Still encountering this error
reason="Search not executed: Dispatch Manager: The minimum free disk space (5000MB) reached for /opt/splunk/var/run/splunk/dispatch. user=admin", concurrency_category="historical", concurrency_context="user_instance-wide", current_concurrency=0, concurrency_limit=5000
Would you know what should I do to resolve and finally get rid of this error?
Your df
shows that you habe only 1.7GB free, that's why Splunk complains that there is not enough (>5GB) free space.
You could lower that limit like described here:
https://answers.splunk.com/answers/214804/the-minimum-free-disk-space-5000mb-reached-for-opt.html
I would however avoid that and instead make that partition bigger, because else you might into problems again soon.
Please do df -h
to show the free space on your partitions.
Hi xpax,
Please see below:
[xxxxxxxxxxxxxxxxxx@xxxxxxx.com@xxx-sesh-vm01 ~]$ df -h
Filesystem Size Used Avail Use% Mounted on
/dev/sda2 32G 30G 1.7G 95% /
devtmpfs 6.9G 0 6.9G 0% /dev
tmpfs 6.9G 0 6.9G 0% /dev/shm
tmpfs 6.9G 106M 6.8G 2% /run
tmpfs 6.9G 0 6.9G 0% /sys/fs/cgroup
/dev/sda1 497M 114M 384M 23% /boot
tmpfs 1.4G 0 1.4G 0% /run/user/565601233
/dev/loop0 1.3M 1.3M 0 100% /mnt
tmpfs 1.4G 0 1.4G 0% /run/user/565601149
[xxxxxxxxxxxxxxxxxx@xxxxxxx.com@xxx-sesh-vm01 ~]$ df -h /opt/splunk
Filesystem Size Used Avail Use% Mounted on
/dev/sda2 32G 30G 1.7G 95% /
[xxxxxxxxxxxxxxxxxx@xxxxxxx.com@xxx-sesh-vm01 ~]$ df -h /opt/splunk/var/
Filesystem Size Used Avail Use% Mounted on
/dev/sda2 32G 30G 1.7G 95% /