homePath/coldPath.maxdatasizemb and maxTotalDataSizeMB

[splunkreal]

Hello,

could you tell me what happens if coldPath.maxdatasizemb is reached but maxTotalDataSizeMB higher than homePath.maxdatasizemb+coldPath.maxdatasizemb?

Example :

homePath.maxDataSizeMB = 115 000
coldPath.maxDataSizeMB = 450 000
maxTotalDataSizeMB = 5 000 000

Thanks.

[kheo_splunk · Accepted solution]

Whichever attribute the size of index comes first will apply.
There is no chance that maxTotalDataSizeMB can apply and the corresponding cold buckets will be frozen as it will always hit coldPath.maxDataSizeMB first before reaching to maxTotalDataSizeMB in the example above.