Deployment Architecture

Has maxColdDBCount been deprecated?

dah2016
Engager

So it appears that maxColdDBCount has been deprecated in 4.2.3. Is there replacement? Or should I just get rid off it? I was using it up to 4.1.7, just upgraded from that version.

1 Solution

gkanapathy
Splunk Employee
Splunk Employee

maxColdDBCount never did anything from 4.0 on. It does not and never did (even under version 3.x) delete or remove buckets from the cold store. It was used purely for search and memory resource management internally in 3.x, and had no effect in 4.x and up.

To manage space used on the cold store, in 4.2.x, you can (and should) use the volume limit settings. In 4.1 and 4.0, you would use maxTotalDataSizeMB, at least indirectly.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

maxColdDBCount never did anything from 4.0 on. It does not and never did (even under version 3.x) delete or remove buckets from the cold store. It was used purely for search and memory resource management internally in 3.x, and had no effect in 4.x and up.

To manage space used on the cold store, in 4.2.x, you can (and should) use the volume limit settings. In 4.1 and 4.0, you would use maxTotalDataSizeMB, at least indirectly.

Get Updates on the Splunk Community!

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

A Guide To Cloud Migration Success

As enterprises’ rapid expansion to the cloud continues, IT leaders are continuously looking for ways to focus ...

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...