Hello,
I'm running my Splunk cluster on cloud, and I'm running out of disk space. I'm planning on increasing the available disk space but I'm wondering if there might be any side effects on doing this that I should prepare for.
Since this would be done in a Production environment I need to avoid at all costs losing access to the indexed data.
I'll also perform a disk snapshot just in case.
All the indexes are set to:
`maxDataSize = auto_high_volume`
The steps involved would be:
**1.** Stop the Splunk Forwarder.
**2.** Stop the Splunk Indexer.
**3.** Perform Splunk Indexer disk Snapshot.
**4.** Increase the disk space on Splunk Indexer.
**5.** Wait for the change to be in effect.
**6.** Restart the Splunk Indexer.
**7.** Restart the consumers on the Splunk Forwarder.
Are there any other steps that I should perform?
Thanks in advance!
↧