Splunk Enterprise

Issues configuring hot/warm limits on index size

jfontenot
Explorer

I am trying to limit the hot/warm index size for several indexes using the homepath.maxDataSizeMB command, however we restarting splunk I get the following error:

Invalid key in stanza [main] in /indexes.conf, line 112: homepath.maxDataSizeMB (value: 5000).

Here is the stanza I have configured for that index.

[main]
homePath = volume:hot/defaultdb/db
coldPath = volume:cold/defaultdb/colddb
thawedPath = $SPLUNK_DB/defaultdb/thaweddb
homepath.maxDataSizeMB = 5000

I feel like I'm missing something simple and I can't figure out what it is.

Labels (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

The "p" in "homepath" must be capitalized. 

[main]
homePath = volume:hot/defaultdb/db
coldPath = volume:cold/defaultdb/colddb
thawedPath = $SPLUNK_DB/defaultdb/thaweddb
homePath.maxDataSizeMB = 5000
---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

The "p" in "homepath" must be capitalized. 

[main]
homePath = volume:hot/defaultdb/db
coldPath = volume:cold/defaultdb/colddb
thawedPath = $SPLUNK_DB/defaultdb/thaweddb
homePath.maxDataSizeMB = 5000
---
If this reply helps you, Karma would be appreciated.

jfontenot
Explorer

That worked, thanks so much for your help!

0 Karma
Get Updates on the Splunk Community!

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...