Getting Data In

homePath/coldPath.maxdatasizemb and maxTotalDataSizeMB

realsplunk
Motivator

Hello,

could you tell me what happens if coldPath.maxdatasizemb is reached but maxTotalDataSizeMB higher than homePath.maxdatasizemb+coldPath.maxdatasizemb?

Example :

homePath.maxDataSizeMB = 115 000
coldPath.maxDataSizeMB = 450 000
maxTotalDataSizeMB = 5 000 000

Thanks.

1 Solution

kheo_splunk
Splunk Employee
Splunk Employee

Whichever attribute the size of index comes first will apply.
There is no chance that maxTotalDataSizeMB can apply and the corresponding cold buckets will be frozen as it will always hit coldPath.maxDataSizeMB first before reaching to maxTotalDataSizeMB in the example above.

View solution in original post

kheo_splunk
Splunk Employee
Splunk Employee

Whichever attribute the size of index comes first will apply.
There is no chance that maxTotalDataSizeMB can apply and the corresponding cold buckets will be frozen as it will always hit coldPath.maxDataSizeMB first before reaching to maxTotalDataSizeMB in the example above.

Get Updates on the Splunk Community!

Don't wait! Accept the Mission Possible: Splunk Adoption Challenge Now and Win ...

Attention everyone! We have exciting news to share! We are recruiting new members for the Mission Possible: ...

Unify Your SecOps with Splunk Mission Control

In today’s post, I'm excited to share some recent Splunk Mission Control innovations. With Splunk Mission ...

Data Preparation Made Easy: SPL2 for Edge Processor

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...