Data Forwarding Issues - Splunk Troubleshooting Use Case - 5

13.06.24 10:26 PM - By Murugan

Data Forwarding Issues:

Issue: Forwarder is not sending data.
Scenario 3: None of the logs are available in Indexer for last few hours, even Indexer’s internal logs.
Root Cause:
The Indexer Disk size was full.
Solution:
Increase the Indexer Disk/Storage size
(or)
Remove unwanted data from the Indexer, Like test index logs.

Murugan