Monitoring Splunk

How to limit datamodel_summary folder disk space

mbarbaro
Path Finder

Hello guys,

i noticed that the datamodel_summary folder is filling up my diskspace... How can i limit this ?

It is growing day by day with large ammout of GB...

THanks in advance

0 Karma

maraman_splunk
Splunk Employee
Splunk Employee

you can restrict data model age.

you can create a volume for data model and use splunk volume management to limit disk space.
look at indexes.conf spec

you will need :
- one volume with the limit (by indexer)
- reference that volume for tsidx on index

don't set the limit too low or that would probably clean up too much accelerated data.

0 Karma

Grumpalot
Communicator

@mbarbaro, you can lower the amount of days that your Accelerated Data Models are setup for to decrease the amount of disk space you are using per Data Model. This is all dependent on the amount of events vs the amount of time for Data model on how much space the _summary will take up.

http://docs.splunk.com/Documentation/Splunk/6.6.2/Knowledge/Acceleratedatamodels

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Mastering Threat Intelligence in ES 8.5, Splunk AI Assistant v2, and More from Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Break the Build: Inside the KubeDoom Lounge at .conf26

    You step up to the machine. The pixelated corridors of a certain 1993 FPS load in front of you, EMP Pulse ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...