We are on 4.05 and are using the default of memPoolMB = auto in indexes.conf. Is there a way I can find out what size is being set via "auto"?
Actually, memPoolMB is not related to bucket size, but memory pool allocation.
maxDataSize determines the size of your buckets. On 64-bit architecture, a setting of auto_high_volume will give you a bucket size of 10GB. On 32-bit, this is 750MB.
Actually, memPoolMB is not related to bucket size, but memory pool allocation.
maxDataSize determines the size of your buckets. On 64-bit architecture, a setting of auto_high_volume will give you a bucket size of 10GB. On 32-bit, this is 750MB.
yeah, there's no "tuning" going on. Just "auto".
Ok, I didn't realize that there was a separte auto setting. The spec file indicates that "Specifying "auto" or "auto_high_volume" will cause Splunk to autotune this param based on your system (Recommended)"
A value of 100 (or 10GB) does not sound like there's any "auto" tuning going on here.
"
auto for maxDataSize is 100MB for both 64bit and 32bit at this time.
how about just the "auto" setting?
I understand this is different than auto_high.
We are running on 64 bit