Yes, the maxTotalDataSizeMB setting applies to ALL data in the index. So, if I select ALL time for the search for the main index, it should only show around 20 GB of data in the search results? Because I set the maxTotalDataSizeMB for main index as 20 GB, shouldn't I be seeing atmost 20 GB max data for any time frame? It could be less but not more than 20 GB. Below is the query I used to determine how much data in GB is there for the main index. index=main | eval raw_size_gb = (len(_raw) / 1024/ 1024/ 1024) | timechart span=1d sum(raw_size_gb) as Index_Size_In_GB Please let me know if I am on the wrong path.
... View more