Ran out of space due to misconfigured index

[ranjitbrhm1]

Good Day All,
I have a question for you. I recently misconfigured a index and the size went full on the disk drive. So i have a quick question for you. Lets say i have a 500 GB hard drive and then i have to give an index lets say windows 400 GB of the disk space. Now does the hot bucket and cold bucket share the 500GB disk space or does each hot bucket and cold bucket take 500 GB of disk space making 1000GB for an index if the settings are done from the "Web UI". I know we can specify the bucket sizes in indexes.conf. Im just wondering about the web interface.
Thanks

[Sukisen1981]

Hi,

This is a fantastic blog which should answer your question - https://www.splunk.com/blog/2011/01/03/managing-index-sizes-in-splunk.html