QuestionQ79

Infrastructure Planning: Index Design

If the maxDataSize attribute is configured as auto_high_volume in indexes.conf on a 64-bit operating system, what is the maximum size of a hot bucket?

  • A 4 GB
  • B 750 MB
  • C 10 GB
  • D 1 GB
Explanation

For a 64-bit system, Splunk sets maxDataSize=auto_high_volume to 10 GB. This setting is the maximum size a hot bucket can reach before Splunk rolls it to a warm bucket.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!