Deployment Architecture

one of my index size is 500 GB now its almost getting full so want to increase size to 2TB. I am using multi site cluster environment.

New Member

one of my index size is 500 GB now its almost getting full so want to increase size to 2TB. I am using multi site cluster environment. Can anyone please suggest me how to do it?

0 Karma

Splunk Employee
Splunk Employee

@faisal_saifi given that you have the available disk capacity on your indexers, you can change the default from 500GB in indexes.conf. You'll want to make this change on your index cluster master in :

$SPLUNK_HOME/etc/master-apps/_cluster/local/indexes.conf

find the index stanza you want to increase the size on

[indexB]
maxTotalDataSizeMB = 2000000

Apply bundle from cluster master to peers:
$SPLUNK_HOME/bin
./splunk apply cluster-bundle --answer-yes

0 Karma

New Member

Thanks Philip to respond on this. i have already performed the steps you suggested but after applying cluster bundle the changes has been reflected to slave conf file of indexers but it is still not reflecting on GUI index volume.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!