Monitoring Splunk

How to limit datamodel_summary folder disk space

mbarbaro
Path Finder

Hello guys,

i noticed that the datamodel_summary folder is filling up my diskspace... How can i limit this ?

It is growing day by day with large ammout of GB...

THanks in advance

0 Karma

maraman_splunk
Splunk Employee
Splunk Employee

you can restrict data model age.

you can create a volume for data model and use splunk volume management to limit disk space.
look at indexes.conf spec

you will need :
- one volume with the limit (by indexer)
- reference that volume for tsidx on index

don't set the limit too low or that would probably clean up too much accelerated data.

0 Karma

Grumpalot
Communicator

@mbarbaro, you can lower the amount of days that your Accelerated Data Models are setup for to decrease the amount of disk space you are using per Data Model. This is all dependent on the amount of events vs the amount of time for Data model on how much space the _summary will take up.

http://docs.splunk.com/Documentation/Splunk/6.6.2/Knowledge/Acceleratedatamodels

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...