Splunk Enterprise

Issues configuring hot/warm limits on index size

jfontenot
Explorer

I am trying to limit the hot/warm index size for several indexes using the homepath.maxDataSizeMB command, however we restarting splunk I get the following error:

Invalid key in stanza [main] in /indexes.conf, line 112: homepath.maxDataSizeMB (value: 5000).

Here is the stanza I have configured for that index.

[main]
homePath = volume:hot/defaultdb/db
coldPath = volume:cold/defaultdb/colddb
thawedPath = $SPLUNK_DB/defaultdb/thaweddb
homepath.maxDataSizeMB = 5000

I feel like I'm missing something simple and I can't figure out what it is.

Labels (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

The "p" in "homepath" must be capitalized. 

[main]
homePath = volume:hot/defaultdb/db
coldPath = volume:cold/defaultdb/colddb
thawedPath = $SPLUNK_DB/defaultdb/thaweddb
homePath.maxDataSizeMB = 5000
---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

The "p" in "homepath" must be capitalized. 

[main]
homePath = volume:hot/defaultdb/db
coldPath = volume:cold/defaultdb/colddb
thawedPath = $SPLUNK_DB/defaultdb/thaweddb
homePath.maxDataSizeMB = 5000
---
If this reply helps you, Karma would be appreciated.

jfontenot
Explorer

That worked, thanks so much for your help!

0 Karma
Get Updates on the Splunk Community!

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

Customer Experience | Join the Customer Advisory Board!

Are you ready to take your Splunk journey to the next level? 🚀 We invite you to join our elite squad ...