Insufficient disk space

Microsoft.Office.Sharepoint.Server.2007.Insufficient_disk_space (Rule)

When crawling one or more content sources, the Office SharePoint Servers Search (OSearch) service updates the index, which is stored in the file system of the index server. This index is then propagated to all query servers. If a hard disk that contains this index has inadequate free space to update the index, this alert occurs and the content sources update is paused.

Knowledge Base article:

Summary

When crawling one or more content sources, the Office SharePoint Server Search (OSearch) service updates the index, which is stored in the file system of the index server. This index is then propagated to all query servers. If a hard disk that contains this index has inadequate free space to update the index, this alert occurs and the content sources update is paused.

The update automatically resumes after sufficient hard disk space becomes available.

Causes

The hard disk on which the content index files reside is full.

Resolutions

Ensure that you have sufficient available hard disk space on the hard disk on which the index files reside. You can accomplish this by doing one of the following:

Delete or move non-index files from the hard drive on which the index files reside.
Move the index files to another drive.

If the error occurred on an index server, use the following steps to view the location of the index file. Note that you can view the Microsoft Windows NT Event log to determine the server on which the error occurred.

View the default index file location

In Central Administration, on the top navigation bar, click Application Management.
On the Application Management page, in the Search section, click Manage Search Service.
On the Manage Search Service page, in the Query and Index Servers section, click the link for the Search service.
The location of the index file is displayed in the Default Index File Location section.

The steps for moving the index files to another drive vary depending upon whether the error occurred on an index server or a query server. Use the appropriate procedure (shown below) to move your index files.

Move the index files to another drive on a query server

On the affected query server, open the command prompt and navigate to the c:\program files\common files\Microsoft shared\Web server extensions\12\bin directory.
Type the following: stsadm.exe -o osearch -propagationlocation where directory is the new location where you want to move the content index.

Move the index files to another drive on an index server

On the affected query server, open the command prompt and navigate to the c:\program files\common files\Microsoft shared\Web server extensions\12\bin directory.
Type the following: stsadm.exe -o osearch –editssp -indexlocation where directory is the new location where you want to move the content index.

Element properties:

Target

Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Category

EventCollection

Enabled

True

Event_ID

7013

Event Source

Office Server Search

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Remotable

True

Alert Message

Insufficient disk space

Event Log

Application

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Microsoft.Windows.EventProvider	Default
CollectData	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
DataWarehousePublishData	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default
MOSS.GenerateAlert	WriteAction	System.Health.GenerateAlert	Default

Source Code:

<Rule ID="Microsoft.Office.Sharepoint.Server.2007.Insufficient_disk_space" Enabled="onEssentialMonitoring" Target="Microsoft.Office.Sharepoint.Server.2007.MOSS.Application" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="MSWL!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="MSWL!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>7013</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Office Server Search</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="CollectData" TypeID="SystemCenter!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="DataWarehousePublishData" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

    <WriteAction ID="MOSS.GenerateAlert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertMessageId>$MPElement[Name="Microsoft.Office.Sharepoint.Server.2007.Insufficient_disk_space.AlertMessageID"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDisplayNumber$</AlertParameter1>

        <AlertParameter2>$Data/EventDescription$</AlertParameter2>

        <AlertParameter3>$Data/PublisherName$</AlertParameter3>

        <AlertParameter4>$Target/Host/Property[Type="MSWL!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter4>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>

        <SuppressionValue>$Data/PublisherName$</SuppressionValue>

        <SuppressionValue>$Data/LoggingComputer$</SuppressionValue>

        <SuppressionValue>$Data/EventDescription$</SuppressionValue>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>