All Apps and Add-ons

Search Not Executed | Dispatch Command: The minimum free disk space (5000MB)

Anmar0293
Path Finder

I'm running search and suddenly there aren't any results neither in the Search & Report app or Hadoop connect search. I receive the error below:

reason="Search not executed: Dispatch Command: The minimum free disk space (5000MB) reached for $PATH
user=admin.", concurrency_category="historical", concurrency_context="user_instance-wide", current_concurrency=0, concurrency_limit=5000

Any suggestions?

0 Karma

muralikoppula
Communicator

Limits for controlling disk space in Splunk can be changed

The relevant stanza and parameter of interest in server.conf ($SPLUNK_HOME/etc/system/local/server.conf) is:

 [diskUsage]
 minFreeSpace = 500

For more details please look here:

https://docs.splunk.com/Documentation/Splunk/7.2.3/Indexer/Setlimitsondiskusage

Hope this helps.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Your Splunk disk has less than 5GB of free space, which is the least Splunk requires to do a search. Free up some space on the disk and you should be able to search again. A good place to look for things to delete is the dispatch directory ($SPLUNK_HOME/var/run/splunk/dispatch). It often contains old search artifacts that were never cleaned up for one reason or another.

---
If this reply helps you, Karma would be appreciated.
0 Karma

nick405060
Motivator

Just clear $splunk$/var/run/splunk/dispatch and that will purge a fair amount. you'll have to run "$splunk$/bin/splunk stop" and then purge to clear the whole thing

0 Karma

Anmar0293
Path Finder

I deleted a lot, but didn't solve the issue.
The solution above did.
Thanks a lot for your suggestion!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...