I get the following error before I even get to do anything with Splunk on docker 7.2.0.
Disk Space
Root Cause(s):
The diskspace remaining=3002 has breached the red threshold for filesystems=[/opt/splunk/var/lib/splunk/audit/db]
Last 50 related messages:
11-02-2018 23:49:19.457 +0000 ERROR DiskMon - Disk Monitor: The index processor has paused data flow. Current free disk space on partition '/opt/splunk/var' has fallen to 3002MB, below the minimum of 5000MB. Data writes to index path '/opt/splunk/var/lib/splunk/audit/db'cannot safely proceed. Increase free disk space on partition '/opt/splunk/var' by removing or relocating data.
Any ideas on how to get around this?
... View more