Monitoring Splunk

How to limit datamodel_summary folder disk space

mbarbaro
Path Finder

Hello guys,

i noticed that the datamodel_summary folder is filling up my diskspace... How can i limit this ?

It is growing day by day with large ammout of GB...

THanks in advance

0 Karma

maraman_splunk
Splunk Employee
Splunk Employee

you can restrict data model age.

you can create a volume for data model and use splunk volume management to limit disk space.
look at indexes.conf spec

you will need :
- one volume with the limit (by indexer)
- reference that volume for tsidx on index

don't set the limit too low or that would probably clean up too much accelerated data.

0 Karma

Grumpalot
Communicator

@mbarbaro, you can lower the amount of days that your Accelerated Data Models are setup for to decrease the amount of disk space you are using per Data Model. This is all dependent on the amount of events vs the amount of time for Data model on how much space the _summary will take up.

http://docs.splunk.com/Documentation/Splunk/6.6.2/Knowledge/Acceleratedatamodels

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...