topic Re: [Blog] Differentiate various size related parameters from indexes.conf in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Blog-Differentiate-various-size-related-parameters-from-indexes/m-p/605177#M105203 <P>indexes.conf.spect should give acurate answer -&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/latest/Admin/indexesconf" target="_blank">https://docs.splunk.com/Documentation/Splunk/latest/Admin/indexesconf</A>&nbsp;</P><P><SPAN>But here I'm trying to summarize in one-liners.</SPAN></P><UL><LI><STRONG>maxTotalDataSizeMB</STRONG><UL><LI>How large an Index can grow. (default ~500GB)</LI></UL></LI><LI><STRONG>maxGlobalRawDataSizeMB</STRONG><UL><LI><SPAN>How large an Index's _raw data (uncompressed size) can grow. This is only valid for remote-storage-enabled indexes. (default - unlimited)</SPAN></LI></UL></LI><LI><STRONG>maxGlobalDataSizeMB</STRONG><UL><LI><SPAN>How large an Index can grow in Smart Store (default - unlimited)</SPAN></LI></UL></LI><LI><STRONG>maxDataSize</STRONG><UL><LI><SPAN>Maximum allowed size of a bucket (does not apply to older buckets that are already there) (default - auto ~750 MB)</SPAN></LI></UL></LI><LI><STRONG>maxVolumeDataSizeMB</STRONG><UL><LI><SPAN>Maximum allowed size of a volume. (no default)</SPAN></LI></UL></LI><LI><STRONG>homePath.maxDataSizeMB</STRONG><UL><LI><SPAN>Maximum allowed size of home path. (default - $SPLUNK_HOME/var/lib/splunk/&lt;index&gt;/db)</SPAN></LI></UL></LI><LI><STRONG>coldPath.maxDataSizeMB</STRONG><UL><LI><SPAN>Maximum allowed size of cold path. (default - $SPLUNK_HOME/var/lib/splunk/&lt;index&gt;/colddb)</SPAN></LI></UL></LI></UL><P>&nbsp;</P><P>Whichever storage limit reaches the first the oldest bucket will get impacted (moved/deleted depending on which parameter it is and what policies are configured.) For details please read indexes.conf.spec.</P><P>&nbsp;</P><P>I've covered only size related, there are also a number of buckets-related parameters.&nbsp; Though I may come back in the future and update the answer to include a one-liner description for bucket count-related useful parameters.</P> Mon, 11 Jul 2022 16:05:02 GMT VatsalJagani 2022-07-11T16:05:02Z [Blog] Differentiate various size related parameters from indexes.conf https://community.splunk.com/t5/Getting-Data-In/Blog-Differentiate-various-size-related-parameters-from-indexes/m-p/605176#M105202 <P><SPAN>[Blog Post] Differentiate various size related parameters from indexes.conf</SPAN></P><UL><LI>maxTotalDataSizeMB</LI><LI>maxGlobalRawDataSizeMB</LI><LI>maxGlobalDataSizeMB</LI><LI>maxDataSize</LI><LI>maxVolumeDataSizeMB</LI></UL> Mon, 11 Jul 2022 16:03:19 GMT https://community.splunk.com/t5/Getting-Data-In/Blog-Differentiate-various-size-related-parameters-from-indexes/m-p/605176#M105202 VatsalJagani 2022-07-11T16:03:19Z Re: [Blog] Differentiate various size related parameters from indexes.conf https://community.splunk.com/t5/Getting-Data-In/Blog-Differentiate-various-size-related-parameters-from-indexes/m-p/605177#M105203 <P>indexes.conf.spect should give acurate answer -&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/latest/Admin/indexesconf" target="_blank">https://docs.splunk.com/Documentation/Splunk/latest/Admin/indexesconf</A>&nbsp;</P><P><SPAN>But here I'm trying to summarize in one-liners.</SPAN></P><UL><LI><STRONG>maxTotalDataSizeMB</STRONG><UL><LI>How large an Index can grow. (default ~500GB)</LI></UL></LI><LI><STRONG>maxGlobalRawDataSizeMB</STRONG><UL><LI><SPAN>How large an Index's _raw data (uncompressed size) can grow. This is only valid for remote-storage-enabled indexes. (default - unlimited)</SPAN></LI></UL></LI><LI><STRONG>maxGlobalDataSizeMB</STRONG><UL><LI><SPAN>How large an Index can grow in Smart Store (default - unlimited)</SPAN></LI></UL></LI><LI><STRONG>maxDataSize</STRONG><UL><LI><SPAN>Maximum allowed size of a bucket (does not apply to older buckets that are already there) (default - auto ~750 MB)</SPAN></LI></UL></LI><LI><STRONG>maxVolumeDataSizeMB</STRONG><UL><LI><SPAN>Maximum allowed size of a volume. (no default)</SPAN></LI></UL></LI><LI><STRONG>homePath.maxDataSizeMB</STRONG><UL><LI><SPAN>Maximum allowed size of home path. (default - $SPLUNK_HOME/var/lib/splunk/&lt;index&gt;/db)</SPAN></LI></UL></LI><LI><STRONG>coldPath.maxDataSizeMB</STRONG><UL><LI><SPAN>Maximum allowed size of cold path. (default - $SPLUNK_HOME/var/lib/splunk/&lt;index&gt;/colddb)</SPAN></LI></UL></LI></UL><P>&nbsp;</P><P>Whichever storage limit reaches the first the oldest bucket will get impacted (moved/deleted depending on which parameter it is and what policies are configured.) For details please read indexes.conf.spec.</P><P>&nbsp;</P><P>I've covered only size related, there are also a number of buckets-related parameters.&nbsp; Though I may come back in the future and update the answer to include a one-liner description for bucket count-related useful parameters.</P> Mon, 11 Jul 2022 16:05:02 GMT https://community.splunk.com/t5/Getting-Data-In/Blog-Differentiate-various-size-related-parameters-from-indexes/m-p/605177#M105203 VatsalJagani 2022-07-11T16:05:02Z