https://community.splunk.com/t5/Splunk-Search/What-will-break-if-I-set-coldPath-to-dev-null/m-p/281328#M190553 <P>Just set maxTotalDataSizeMB and homePath.maxDataSizeMB to the same amount. No need for shenanigans with the locations.</P> <PRE><CODE>[someindex] maxTotalDataSizeMB = 100000 homePath.maxDataSizeMB = 100000 frozenTimePeriodInSecs = 2592000 </CODE></PRE> <UL> <LI>edit - added your 30 day limit</LI> </UL> Mon, 11 Apr 2016 22:13:55 GMT twinspop 2016-04-11T22:13:55Z https://community.splunk.com/t5/Splunk-Search/What-will-break-if-I-set-coldPath-to-dev-null/m-p/281327#M190552 <P>I've been asked to size a Splunk installation with only 30 days of hot/warm data - no cold data. I've never heard of this before. I could probably set <CODE>coldPath=/dev/null</CODE> so warm data is deleted instead of being moved to cold, but can Splunk handle that?</P> Mon, 11 Apr 2016 22:05:01 GMT https://community.splunk.com/t5/Splunk-Search/What-will-break-if-I-set-coldPath-to-dev-null/m-p/281327#M190552 richgalloway 2016-04-11T22:05:01Z https://community.splunk.com/t5/Splunk-Search/What-will-break-if-I-set-coldPath-to-dev-null/m-p/281328#M190553 <P>Just set maxTotalDataSizeMB and homePath.maxDataSizeMB to the same amount. No need for shenanigans with the locations.</P> <PRE><CODE>[someindex] maxTotalDataSizeMB = 100000 homePath.maxDataSizeMB = 100000 frozenTimePeriodInSecs = 2592000 </CODE></PRE> <UL> <LI>edit - added your 30 day limit</LI> </UL> Mon, 11 Apr 2016 22:13:55 GMT https://community.splunk.com/t5/Splunk-Search/What-will-break-if-I-set-coldPath-to-dev-null/m-p/281328#M190553 twinspop 2016-04-11T22:13:55Z