Monitoring Splunk

How to limit datamodel_summary folder disk space

mbarbaro
Path Finder

Hello guys,

i noticed that the datamodel_summary folder is filling up my diskspace... How can i limit this ?

It is growing day by day with large ammout of GB...

THanks in advance

0 Karma

maraman_splunk
Splunk Employee
Splunk Employee

you can restrict data model age.

you can create a volume for data model and use splunk volume management to limit disk space.
look at indexes.conf spec

you will need :
- one volume with the limit (by indexer)
- reference that volume for tsidx on index

don't set the limit too low or that would probably clean up too much accelerated data.

0 Karma

Grumpalot
Communicator

@mbarbaro, you can lower the amount of days that your Accelerated Data Models are setup for to decrease the amount of disk space you are using per Data Model. This is all dependent on the amount of events vs the amount of time for Data model on how much space the _summary will take up.

http://docs.splunk.com/Documentation/Splunk/6.6.2/Knowledge/Acceleratedatamodels

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...

Level Up Your Workflow: Mastering Splunk Cloud Management via Terraform

Tech Talk Recap   From Chaos to Control: Scaling Splunk Cloud with Infrastructure as Code Managing apps in ...