Hi Guys
I have Splunk enterprise installed. I have pulled across some directory's with files inside ( from Kali ).
The issue is I cannot bring up the files in the search and reporting app..
I believe it is because of the Messages in the screen shot below.. which I have no idea how to fix.. even after reading some forums..
I am non IT person.. and new to Splunk.
Any help would be great .
This is another screen shot of the index path the data writes to.. I need to somehow get more space..
Hi
as you already noticed, you are running out of disc space. You must get additional volume for splunk indexes. Then you have two options: increase /opt/splunk or create own fs/volume group + splunk volume where you move your indexes. There are many examples how this should do on answers.
r. Ismo