Knowledge Management

Datamodel size on disk doesn't make sense?

TheBravoSierra
Path Finder

My Web Datamodel was set to 3 months with 67 GB+ size on disk. I reduced the summary range to 1 month, and size on disk increased to 100 GB+ size on disk. This doesn't make sense, can someone help explain? I would've thought less time range equated to less size on disk. 

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @TheBravoSierra,

I suppose that you rebuilded the DataModel after time reduction.

If no, rebuild it and the disk occupation should be less, if you already did, opena a case to Splunk Support because there isn't any reason for this behaviour.

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @TheBravoSierra,

I suppose that you rebuilded the DataModel after time reduction.

If no, rebuild it and the disk occupation should be less, if you already did, opena a case to Splunk Support because there isn't any reason for this behaviour.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...