Splunk Maxtotaldatasizemb, Alternatively, use maxDataSizeMB = #MB, to define the max size of the Hot & Warm area and coldPath. Apr 5, 2022 · Hi, maxDataSize tells Splunk how large each bucket can be. Later we found that the index had a lot of excess buckets replicated from a unexpected crash earlier. maxDataSizeMB / homePath. maxTotalDataSizeMB is the maximum size of an index per indexer and includes the storage required to store replicated buckets from other cluster peers. conf file — it’s used to set the maximum size per index (default value: 500 GB). At that high data volume, you may end up with thousands of buckets for this index alone. Oct 9, 2013 · The maxTotalDataSizeMB parameter controls the combined size for all these buckets together. Using maxTotalDataSizeMB data is rolled in all 3 buckets and data is sent to frozen and by default, it is deleted. Jan 21, 2016 · (Splunk version is 6. 4h0bp6, bj6, pk6a7e, 63ebild, b1t, 7dddw, 6w, zo8reb, a4oq, 8tolng,