Monitoring Splunk

How to limit datamodel_summary folder disk space

mbarbaro
Path Finder

Hello guys,

i noticed that the datamodel_summary folder is filling up my diskspace... How can i limit this ?

It is growing day by day with large ammout of GB...

THanks in advance

0 Karma

maraman_splunk
Splunk Employee
Splunk Employee

you can restrict data model age.

you can create a volume for data model and use splunk volume management to limit disk space.
look at indexes.conf spec

you will need :
- one volume with the limit (by indexer)
- reference that volume for tsidx on index

don't set the limit too low or that would probably clean up too much accelerated data.

0 Karma

Grumpalot
Communicator

@mbarbaro, you can lower the amount of days that your Accelerated Data Models are setup for to decrease the amount of disk space you are using per Data Model. This is all dependent on the amount of events vs the amount of time for Data model on how much space the _summary will take up.

http://docs.splunk.com/Documentation/Splunk/6.6.2/Knowledge/Acceleratedatamodels

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us.  The ...