Deployment Architecture

one of my index size is 500 GB now its almost getting full so want to increase size to 2TB. I am using multi site cluster environment.

faisal_saifi
New Member

one of my index size is 500 GB now its almost getting full so want to increase size to 2TB. I am using multi site cluster environment. Can anyone please suggest me how to do it?

0 Karma

rphillips_splk
Splunk Employee
Splunk Employee

@faisal_saifi given that you have the available disk capacity on your indexers, you can change the default from 500GB in indexes.conf. You'll want to make this change on your index cluster master in :

$SPLUNK_HOME/etc/master-apps/_cluster/local/indexes.conf

find the index stanza you want to increase the size on

[indexB]
maxTotalDataSizeMB = 2000000

Apply bundle from cluster master to peers:
$SPLUNK_HOME/bin
./splunk apply cluster-bundle --answer-yes

0 Karma

faisal_saifi
New Member

Thanks Philip to respond on this. i have already performed the steps you suggested but after applying cluster bundle the changes has been reflected to slave conf file of indexers but it is still not reflecting on GUI index volume.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...