Knowledge Management

Datamodel size on disk doesn't make sense?

TheBravoSierra
Path Finder

My Web Datamodel was set to 3 months with 67 GB+ size on disk. I reduced the summary range to 1 month, and size on disk increased to 100 GB+ size on disk. This doesn't make sense, can someone help explain? I would've thought less time range equated to less size on disk. 

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @TheBravoSierra,

I suppose that you rebuilded the DataModel after time reduction.

If no, rebuild it and the disk occupation should be less, if you already did, opena a case to Splunk Support because there isn't any reason for this behaviour.

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @TheBravoSierra,

I suppose that you rebuilded the DataModel after time reduction.

If no, rebuild it and the disk occupation should be less, if you already did, opena a case to Splunk Support because there isn't any reason for this behaviour.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...