Deployment Architecture

one of my index size is 500 GB now its almost getting full so want to increase size to 2TB. I am using multi site cluster environment.

faisal_saifi
New Member

one of my index size is 500 GB now its almost getting full so want to increase size to 2TB. I am using multi site cluster environment. Can anyone please suggest me how to do it?

0 Karma

rphillips_splun
Splunk Employee
Splunk Employee

@faisal_saifi given that you have the available disk capacity on your indexers, you can change the default from 500GB in indexes.conf. You'll want to make this change on your index cluster master in :

$SPLUNK_HOME/etc/master-apps/_cluster/local/indexes.conf

find the index stanza you want to increase the size on

[indexB]
maxTotalDataSizeMB = 2000000

Apply bundle from cluster master to peers:
$SPLUNK_HOME/bin
./splunk apply cluster-bundle --answer-yes

0 Karma

faisal_saifi
New Member

Thanks Philip to respond on this. i have already performed the steps you suggested but after applying cluster bundle the changes has been reflected to slave conf file of indexers but it is still not reflecting on GUI index volume.

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>