In your server.conf add the following: (This setting adjusts all queues)
[queue]
maxSize = 500MB # this can be KB,MB, or GB.
You can also specify specific queues, but I was unable to get it to work. See server.conf spec.
... View more
The fix for this problem is to create a home directory for the splunk account. Make sure you create it and set the appropriate permissions.
# mkdir /home/splunk
# chown splunk /home/splunk/
# chgrp splunk /home/splunk/
Then restart splunk.
... View more