hi, i configure my index like this : # volume definitions [volume:hotwarm_cold] path = /mnt/fast_disk maxVolumeDataSizeMB = 5976884 # index definition (calculation is based on a single index) [main] homePath = volume:hotwarm_cold/defaultdb/db coldPath = volume:hotwarm_cold/defaultdb/colddb thawedPath = $SPLUNK_DB/defaultdb/thaweddb homePath.maxDataSizeMB = 768000 coldPath.maxDataSizeMB = 2304000 maxWarmDBCount = 4294967295 frozenTimePeriodInSecs = 10368000 maxDataSize = auto_high_volume coldToFrozenDir = /mnt/fast_disk/defaultdb/frozendb   but in index management i see Max Size of the Entire Index: 500000 what does Max Size of Entire Index do? and i configure my hot/warm size to 750gb, what happens in my index reach Max Size of Entire Index value?   the second question is what does Max Size of Hot/Warm/Cold Bucket do? and what is the difference between auto and auto_high_volume?   best regards ... View more

hi I wanna deploy multisite cluster with 2 sites, 1 in-branch and another in a datacenter, I have 1 indexer for each site, I wanna each site have a copy of another site if the one site goes down, but I really dont understand about site replication factor and search factor. can someone please help me to figure out how to deploy this cluster?   best regards ... View more