one of my index size is 500 GB now its almost getting full so want to increase size to 2TB. I am using multi site cluster environment.

[faisal_saifi]

one of my index size is 500 GB now its almost getting full so want to increase size to 2TB. I am using multi site cluster environment. Can anyone please suggest me how to do it?

[rphillips_splk]

@faisal_saifi given that you have the available disk capacity on your indexers, you can change the default from 500GB in indexes.conf. You'll want to make this change on your index cluster master in :

$SPLUNK_HOME/etc/master-apps/_cluster/local/indexes.conf

find the index stanza you want to increase the size on

[indexB]
maxTotalDataSizeMB = 2000000

Apply bundle from cluster master to peers:
$SPLUNK_HOME/bin
./splunk apply cluster-bundle --answer-yes

[faisal_saifi]

Thanks Philip to respond on this. i have already performed the steps you suggested but after applying cluster bundle the changes has been reflected to slave conf file of indexers but it is still not reflecting on GUI index volume.