https://community.splunk.com/t5/Monitoring-Splunk/component-HotBucketRoller-caller-init-roll-question/m-p/537652#M4749 <P>Good morning fellow Splunkers,</P><P>I am wondering what the caller=init_roll is and if someone could point me to some documentation about it, as I haven't found any yet.</P><P>Basically, I changed the maxDataSize in indexes.conf to 'auto_high_volume' (10GB) from the default of 750MB, and I assume I see all of the current hot buckets for that index rolling to warm so Splunk can start filling the new hot buckets that have the new, increased data size cap.</P><P>However, I haven't been able to find any documentation via google about the 'caller=init_roll' so I can confirm my educated guess.</P> Thu, 28 Jan 2021 15:44:08 GMT TJSplunker 2021-01-28T15:44:08Z https://community.splunk.com/t5/Monitoring-Splunk/component-HotBucketRoller-caller-init-roll-question/m-p/537652#M4749 <P>Good morning fellow Splunkers,</P><P>I am wondering what the caller=init_roll is and if someone could point me to some documentation about it, as I haven't found any yet.</P><P>Basically, I changed the maxDataSize in indexes.conf to 'auto_high_volume' (10GB) from the default of 750MB, and I assume I see all of the current hot buckets for that index rolling to warm so Splunk can start filling the new hot buckets that have the new, increased data size cap.</P><P>However, I haven't been able to find any documentation via google about the 'caller=init_roll' so I can confirm my educated guess.</P> Thu, 28 Jan 2021 15:44:08 GMT https://community.splunk.com/t5/Monitoring-Splunk/component-HotBucketRoller-caller-init-roll-question/m-p/537652#M4749 TJSplunker 2021-01-28T15:44:08Z