Knowledge Management

Datamodel size on disk doesn't make sense?

TheBravoSierra
Path Finder

My Web Datamodel was set to 3 months with 67 GB+ size on disk. I reduced the summary range to 1 month, and size on disk increased to 100 GB+ size on disk. This doesn't make sense, can someone help explain? I would've thought less time range equated to less size on disk. 

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @TheBravoSierra,

I suppose that you rebuilded the DataModel after time reduction.

If no, rebuild it and the disk occupation should be less, if you already did, opena a case to Splunk Support because there isn't any reason for this behaviour.

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @TheBravoSierra,

I suppose that you rebuilded the DataModel after time reduction.

If no, rebuild it and the disk occupation should be less, if you already did, opena a case to Splunk Support because there isn't any reason for this behaviour.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

What's New in Splunk Enterprise 9.4: Features to Power Your Digital Resilience

Hey Splunky People! We are excited to share the latest updates in Splunk Enterprise 9.4. In this release we ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...