index settings using "auto" - what is my bucket size?

[cpenkert]

We are on 4.05 and are using the default of memPoolMB = auto in indexes.conf. Is there a way I can find out what size is being set via "auto"?

[the_wolverine · Accepted solution]

Actually, memPoolMB is not related to bucket size, but memory pool allocation.

maxDataSize determines the size of your buckets. On 64-bit architecture, a setting of auto_high_volume will give you a bucket size of 10GB. On 32-bit, this is 750MB.

[gkanapathy]

yeah, there's no "tuning" going on. Just "auto".

[the_wolverine]

Ok, I didn't realize that there was a separte auto setting. The spec file indicates that "Specifying "auto" or "auto_high_volume" will cause Splunk to autotune this param based on your system (Recommended)"

A value of 100 (or 10GB) does not sound like there's any "auto" tuning going on here.
"

[jrodman]

auto for maxDataSize is 100MB for both 64bit and 32bit at this time.

[cpenkert]

how about just the "auto" setting?

I understand this is different than auto_high.
We are running on 64 bit