×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
michel_rq
Engager
Member since: ‎04-07-2023
‎04-07-2023
Community Statistics
Posts 2
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎04-07-2023
Activity Feed
View All

Re: What are KV store size limitations and fix?

by in Knowledge Management
‎04-07-2023 12:26 PM
‎04-07-2023 12:26 PM
Thank you for such a quick reply. Check out the second sentence here:  https://docs.splunk.com/Documentation/ES/7.1.0/Admin/TroubleshootperformancelargeKVStore#Increase_storage_space_for_KV_Store_collections There are various collections. Typically where we keep our list of IOCs. Im curious if there is a rest endpoint where we can see an actual limit.  ... View more

What are KV store size limitations and fix?

by in Knowledge Management
‎04-07-2023 12:11 PM
‎04-07-2023 12:11 PM
We are monitoring when a single KV store lookup surpasses 25 GB in size AND when the total of all KV store collections surpasses 100 GB in size.  Time and time again I am seeing collections over 25 GBs and the Total surpasses 100 GBs for many different unique environments. The following doesn't appear to be true. MicrosoftTeams-image (65).png What are the actual limits for both a single KV Store lookup and the total of all KV Store lookups? - Can we query them? We want to prevent any KV store crashes.  Thank you. ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎04-07-2023 06:46 PM
Karma given to
View All